Microsoft Teams
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Teams.
Recent Microsoft Teams Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2024-38197 | CVE-2024-38197 Microsoft Teams for iOS Spoofing Vulnerability | August 13, 2024 |
| CVE-2024-21448 | Microsoft Teams for Android Information Disclosure Vulnerability | March 12, 2024 |
| CVE-2024-21374 | Microsoft Teams for Android Information Disclosure | February 13, 2024 |
| CVE-2023-29328 | Microsoft Teams Remote Code Execution Vulnerability | August 8, 2023 |
| CVE-2023-29330 | Microsoft Teams Remote Code Execution Vulnerability | August 8, 2023 |
| CVE-2023-24881 | Microsoft Teams Information Disclosure Vulnerability | May 9, 2023 |
| CVE-2022-21965 | Microsoft Teams Denial of Service Vulnerability | February 8, 2022 |
By the Year
In 2025 there have been 0 vulnerabilities in Microsoft Teams. Last year, in 2024 Teams had 6 security vulnerabilities published. Right now, Teams is on track to have less security vulnerabilities in 2025 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2025 | 0 | 0.00 |
| 2024 | 6 | 6.30 |
| 2023 | 4 | 8.23 |
| 2022 | 1 | 7.50 |
| 2021 | 1 | 5.70 |
| 2020 | 2 | 6.60 |
| 2019 | 1 | 7.80 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Teams vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Teams Security Vulnerabilities
Microsoft Teams Library Injection Vulnerability on macOS
CVE-2024-42004
7.1 - High
- December 18, 2024
A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Improper Verification of Cryptographic Signature
Microsoft Teams WebView.app Helper Library Injection Vulnerability
CVE-2024-41145
7.1 - High
- December 18, 2024
A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Improper Verification of Cryptographic Signature
Microsoft Teams macOS Helper App Library Injection Vulnerability
CVE-2024-41138
7.1 - High
- December 18, 2024
A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.
Improper Verification of Cryptographic Signature
Microsoft Teams for iOS Spoofing Vulnerability
CVE-2024-38197
6.5 - Medium
- August 13, 2024
Microsoft Teams for iOS Spoofing Vulnerability
User Interface (UI) Misrepresentation of Critical Information
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2024-21448
5 - Medium
- March 12, 2024
Microsoft Teams for Android Information Disclosure Vulnerability
Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2024-21374
5 - Medium
- February 13, 2024
Microsoft Teams for Android Information Disclosure Vulnerability
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2
CVE-2023-4863
8.8 - High
- September 12, 2023
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
Memory Corruption
Microsoft Teams Remote Code Execution Vulnerability
CVE-2023-29330
8.8 - High
- August 08, 2023
Microsoft Teams Remote Code Execution Vulnerability
Microsoft Teams Remote Code Execution Vulnerability
CVE-2023-29328
8.8 - High
- August 08, 2023
Microsoft Teams Remote Code Execution Vulnerability
Microsoft Teams Information Disclosure Vulnerability
CVE-2023-24881
6.5 - Medium
- July 11, 2023
Microsoft Teams Information Disclosure Vulnerability
Microsoft Teams Denial of Service Vulnerability
CVE-2022-21965
7.5 - High
- February 09, 2022
Microsoft Teams Denial of Service Vulnerability
Microsoft Teams iOS Information Disclosure Vulnerability
CVE-2021-24114
5.7 - Medium
- February 25, 2021
Microsoft Teams iOS Information Disclosure Vulnerability
The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter
CVE-2020-10146
5.4 - Medium
- December 09, 2020
The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.
XSS
Microsoft Teams Remote Code Execution Vulnerability
CVE-2020-17091
7.8 - High
- November 11, 2020
Microsoft Teams Remote Code Execution Vulnerability
Untrusted search path vulnerability in The installer of Microsoft Teams
CVE-2019-5922
7.8 - High
- March 12, 2019
Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Untrusted Path
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Teams or by Microsoft? Click the Watch button to subscribe.
