1744 matches found
PT-2025-32857
Name of the Vulnerable Software and Affected Versions: Microsoft Teams versions prior to 25122.1415.3698.6812 Description: A heap-based buffer overflow exists in Microsoft Teams, potentially allowing an unauthorized attacker to execute code over a network. Exploitation may involve malicious links...
KLA86586 ACE vulnerability in Microsoft Device
A remote code execution vulnerability was found in Microsoft Teams. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2025-53783 Related products Microsoft-Teams-for-Desktop CVE list CVE-2025-53783 critical Solution Install necessary updates from th...
Microsoft Teams 安全漏洞
Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting the vulnerability could execute code. The following products and versions are affected:Teams for D365 Remote Assis...
KLA86587 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Excel can be...
PT-2025-112: Stored XSS in FreeScout
The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to inject arbitrary HTML tags and JavaScript into web pages, resulting in execution of malicious code in the victim’s browser. Vulnerability status: Confirmed by vendor Date of...
Debunking API Security Myths
I recently sat down with Tejpal Garwhal, Application Security and DevSecOps Leader, for a conversation debunking some of the most common API security myths. From zombie endpoints to the limits of WAFS and gateways, we covered what’s really happening on the ground; and what security teams need to ...
Top IT Staff Augmentation Companies in USA 2025
Staff augmentation is a strategy for smart tech teams looking to launch something big. Trying to plug skill gaps or scale without the overhead? Collaborate with a trusted IT staff augmentation company...
Microsoft at Black Hat USA 2025: A unified approach to modern cyber defense
Microsoft will be at Black Hat USA 2025, August 5–7 in Las Vegas, and we’re bringing you a unified, practitioner-driven experience built around real-world insights, threat intelligence, incident response, and hands-on AI expertise. We believe security teams are strongest when intelligence, tools,...
Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms
Cybersecurity researchers have flagged a new variant of a known malware loader called Matanbuchus that packs in significant features to enhance its stealth and evade detection. Matanbuchus is the name given to a malware-as-a-service MaaS offering that can act as a conduit for next-stage payloads,...
The vulnerability of the corporate platform Microsoft Teams, related to synchronization errors when using a shared resource, allows a perpetrator to increase their privileges.
The vulnerability of the corporate platform Microsoft Teams is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the corporate platform Microsoft Teams, which arises from the improper handling of insufficient permissions or privileges, allows a perpetrator to elevate their privileges.
The vulnerability of the corporate platform Microsoft Teams is related to the improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The State of Cyber Risk 2025: Business Context Needed
The cyber risk conversation is changing. Momentum is growing for formal cyber risk programs. However, despite rising investments, evolving frameworks, and more vocal boardroom interest, new data reveals that most organizations remain immature in their risk management programs, and cyber risk is...
CVE-2025-49731
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
CVE-2025-49737
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Teams allows an authorized attacker to elevate privileges locally...
CVE-2025-49737
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Teams allows an authorized attacker to elevate privileges locally...
CVE-2025-49737
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Teams allows an authorized attacker to elevate privileges locally...
CVE-2025-49731
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
CVE-2025-49731
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network...
CVE-2025-49737
This CVE (CVE-2025-49737) concerns Microsoft Teams. Description: a race condition arising from concurrent execution on a shared resource could let an authenticated user elevate privileges locally. Affected product: Microsoft Teams (desktop/mobile). Root cause: improper synchronization / race cond...
