Teams Microsoft Teams

Do you want an email whenever new security vulnerabilities are reported in Microsoft Teams?

Recent Microsoft Teams Security Advisories

Advisory Title Published
CVE-2023-29328 Microsoft Teams Remote Code Execution Vulnerability August 8, 2023
CVE-2023-29330 Microsoft Teams Remote Code Execution Vulnerability August 8, 2023
CVE-2023-24881 Microsoft Teams Information Disclosure Vulnerability May 9, 2023
CVE-2022-21965 Microsoft Teams Denial of Service Vulnerability February 8, 2022

By the Year

In 2023 there have been 3 vulnerabilities in Microsoft Teams with an average score of 8.0 out of ten. Last year Teams had 1 security vulnerability published. That is, 2 more vulnerabilities have already been reported in 2023 as compared to last year. However, the average CVE base score of the vulnerabilities in 2023 is greater by 0.53.

Year Vulnerabilities Average Score
2023 3 8.03
2022 1 7.50
2021 1 5.70
2020 2 6.60
2019 1 7.80
2018 0 0.00

It may take a day or so for new Teams vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Microsoft Teams Security Vulnerabilities

Microsoft Teams Remote Code Execution Vulnerability

CVE-2023-29330 8.8 - High - August 08, 2023

Microsoft Teams Remote Code Execution Vulnerability

Microsoft Teams Remote Code Execution Vulnerability

CVE-2023-29328 8.8 - High - August 08, 2023

Microsoft Teams Remote Code Execution Vulnerability

Microsoft Teams Information Disclosure Vulnerability

CVE-2023-24881 6.5 - Medium - July 11, 2023

Microsoft Teams Information Disclosure Vulnerability

Microsoft Teams Denial of Service Vulnerability.

CVE-2022-21965 7.5 - High - February 09, 2022

Microsoft Teams Denial of Service Vulnerability.

Microsoft Teams iOS Information Disclosure Vulnerability

CVE-2021-24114 5.7 - Medium - February 25, 2021

Microsoft Teams iOS Information Disclosure Vulnerability

Information Disclosure

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter

CVE-2020-10146 5.4 - Medium - December 09, 2020

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.

XSS

Microsoft Teams Remote Code Execution Vulnerability

CVE-2020-17091 7.8 - High - November 11, 2020

Microsoft Teams Remote Code Execution Vulnerability

Untrusted search path vulnerability in The installer of Microsoft Teams

CVE-2019-5922 7.8 - High - March 12, 2019

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Untrusted Path

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Microsoft Teams or by Microsoft? Click the Watch button to subscribe.

Microsoft
Vendor

subscribe