What’s Vulnerable › Products

Microsoft Teams vulnerabilities

31 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.

Check whether your Microsoft Teams version is affected

Exploited Microsoft Teams vulnerabilities

• CVE-2023-4863 — Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Latest Microsoft Teams vulnerabilities

• CVE-2026-69559 — Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 6.3)
• CVE-2026-65812 — Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 6.8)
• CVE-2026-65769 — Microsoft Teams iOS Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2026-65768 — Microsoft Teams Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-65767 — Microsoft Teams for Android Spoofing Vulnerability (CVSS 7.6)
• CVE-2026-65667 — Microsoft Teams Elevation of Privilege Vulnerability (CVSS 10.0)
• CVE-2026-62918 — Microsoft Teams Spoofing Vulnerability (CVSS 7.5)
• CVE-2026-62896 — Microsoft Teams Elevation of Privilege Vulnerability (CVSS 9.6)
• CVE-2026-42835 — Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 8.1)
• CVE-2026-32185 — Microsoft Teams Spoofing Vulnerability (CVSS 5.5)
• CVE-2026-33823 — Microsoft Team Events Portal Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-26133 — M365 Copilot Information Disclosure Vulnerability (CVSS 7.1)
• CVE-2026-21535 — Microsoft Teams Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2025-53783 — Microsoft Teams Remote Code Execution Vulnerability (CVSS 7.5)
• CVE-2025-49737 — Microsoft Teams Elevation of Privilege Vulnerability (CVSS 7.0)
• CVE-2025-49731 — Microsoft Teams Elevation of Privilege Vulnerability (CVSS 3.1)
• CVE-2024-42004 — (CVSS 9.8)
• CVE-2024-41145 — (CVSS 9.8)
• CVE-2024-41138 — (CVSS 9.8)
• CVE-2024-38197 — Microsoft Teams for iOS Spoofing Vulnerability (CVSS 6.5)
• CVE-2024-21448 — Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 5.0)
• CVE-2024-21374 — Microsoft Teams for Android Information Disclosure Vulnerability (CVSS 5.0)
• CVE-2023-4863 — Google Chromium WebP Heap-Based Buffer Overflow Vulnerability (CVSS 8.8) — exploited
• CVE-2023-29330 — Microsoft Teams Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2023-29328 — Microsoft Teams Remote Code Execution Vulnerability (CVSS 8.8)