CVE-2023-24881

Microsoft Teams Information Disclosure Vulnerability

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVE-2022-21965

Microsoft Teams Denial of Service Vulnerability

CVE-2024-21374

Microsoft Teams for Android Information Disclosure Vulnerability

CVE-2023-29330

Microsoft Teams Remote Code Execution Vulnerability

CVE-2024-21448

Microsoft Teams for Android Information Disclosure Vulnerability

CVE-2023-29328

Microsoft Teams Remote Code Execution Vulnerability

CVE-2020-10146

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all ...

CVE-2024-38197

Microsoft Teams for iOS Spoofing Vulnerability

CVE-2025-49731

Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

CVE-2025-49737

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.