Teams
by Microsoft
CVEs (33)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-41138 | Hig | 0.46 | 7.1 | 0.01 | Dec 18, 2024 | A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious… | ||
| CVE-2024-38197 | Med | 0.44 | 6.5 | 0.16 | Aug 13, 2024 | Microsoft Teams for iOS Spoofing Vulnerability | ||
| CVE-2019-0647 | Med | 0.43 | 6.5 | 0.05 | Jan 17, 2019 | An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team. | ||
| CVE-2026-65769 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2023-24881 | Med | 0.42 | 6.5 | 0.01 | Jul 11, 2023 | Microsoft Teams Information Disclosure Vulnerability | ||
| CVE-2021-24114 | Med | 0.37 | 5.7 | 0.03 | Feb 25, 2021 | Microsoft Teams iOS Information Disclosure Vulnerability | ||
| CVE-2020-10146 | Med | 0.37 | 5.7 | 0.02 | Dec 9, 2020 | The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This… | ||
| CVE-2026-32185 | Med | 0.36 | 5.5 | 0.00 | May 12, 2026 | Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. | ||
| CVE-2019-0646 | Med | 0.35 | 5.4 | 0.01 | Jan 17, 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team. | ||
| CVE-2018-8602 | Med | 0.35 | 5.4 | 0.02 | Nov 14, 2018 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team. | ||
| CVE-2024-21448 | Med | 0.33 | 5.0 | 0.01 | Mar 12, 2024 | Microsoft Teams for Android Information Disclosure Vulnerability | ||
| CVE-2024-21374 | Med | 0.33 | 5.0 | 0.01 | Feb 13, 2024 | Microsoft Teams for Android Information Disclosure Vulnerability | ||
| CVE-2025-49731 | Low | 0.20 | 3.1 | 0.00 | Jul 8, 2025 | Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network. |
- risk 0.46cvss 7.1epss 0.01
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious…
- risk 0.44cvss 6.5epss 0.16
Microsoft Teams for iOS Spoofing Vulnerability
- risk 0.43cvss 6.5epss 0.05
An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as secret, aka "Team Foundation Server Information Disclosure Vulnerability." This affects Team.
- risk 0.42cvss 6.5epss 0.01
Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Microsoft Teams Information Disclosure Vulnerability
- risk 0.37cvss 5.7epss 0.03
Microsoft Teams iOS Information Disclosure Vulnerability
- risk 0.37cvss 5.7epss 0.02
The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This…
- risk 0.36cvss 5.5epss 0.00
Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.
- risk 0.35cvss 5.4epss 0.01
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
- risk 0.35cvss 5.4epss 0.02
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
- risk 0.33cvss 5.0epss 0.01
Microsoft Teams for Android Information Disclosure Vulnerability
- risk 0.33cvss 5.0epss 0.01
Microsoft Teams for Android Information Disclosure Vulnerability
- risk 0.20cvss 3.1epss 0.00
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Page 2 of 2