CVE-2025-53783: Microsoft Teams Remote Code Execution Vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-12 · updated 2026-06-17
Weakness: CWE-122

Description

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.

Affected products

Microsoft Dynamics 365 Guides: before 907.2505.29001.0 — fixed in 907.2505.29001.0
Microsoft Dynamics 365 Remote Assist: before 316.2505.28001 — fixed in 316.2505.28001
Microsoft Teams: before 1.0.0.2025102802; before 7.10.1; before 25122.1207.3700.1444; before 25122.1415.3698.6812 — fixed in 1.0.0.2025102802, 25122.1207.3700.1444, 25122.1415.3698.6812, 7.10.1
Microsoft Teams Panels: before 1.0.97.2025102203 — fixed in 1.0.97.2025102203
Microsoft Teams Phones: before 1.0.94.2025168802 — fixed in 1.0.94.2025168802
Microsoft Teams for Desktop: from 1.0.0 before 25122.1415.3698.6812 — fixed in 25122.1415.3698.6812
Microsoft Teams for Mac, New Edition: from 1.0.0.0 before 25122.1207.3700.1444 — fixed in 25122.1207.3700.1444
Microsoft Teams: from 1.0.0 before 1416/1.0.0.2025102802 — fixed in 1416/1.0.0.2025102802
Microsoft Teams for D365 Guides HoloLens: from 907.0000 before 907.2505.29001.0 — fixed in 907.2505.29001.0
Microsoft Teams for D365 Remote Assist HoloLens: from 316.0000 before 316.2505.28001 — fixed in 316.2505.28001
Microsoft Teams Panel: from 1.0.97 before 1449/1.0.97.2025102203 — fixed in 1449/1.0.97.2025102203
Microsoft Teams Phone: from 1.0.94 before 1449/1.0.94.2025168802 — fixed in 1449/1.0.94.2025168802

How to fix

Upgrade to a fixed version: Microsoft Dynamics 365 Guides 907.2505.29001.0; Microsoft Dynamics 365 Remote Assist 316.2505.28001; Microsoft Teams 1.0.0.2025102802, 25122.1207.3700.1444, 25122.1415.3698.6812, 7.10.1; Microsoft Teams Panels 1.0.97.2025102203; Microsoft Teams Phones 1.0.94.2025168802; Microsoft Teams for Desktop 25122.1415.3698.6812; Microsoft Teams for Mac, New Edition 25122.1207.3700.1444; Microsoft Teams 1416/1.0.0.2025102802; Microsoft Teams for D365 Guides HoloLens 907.2505.29001.0; Microsoft Teams for D365 Remote Assist HoloLens 316.2505.28001; Microsoft Teams Panel 1449/1.0.97.2025102203; Microsoft Teams Phone 1449/1.0.94.2025168802. Check the vendor advisory for mitigations.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783

Get alerted when CVE-2025-53783 or the next vulnerability affects your stack