Microsoft Microsoft Teams

Name: Microsoft Microsoft Teams
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical7high27medium0low

updated 2026-10-27

vulnerabilities (158)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-65660US	high8.8OT critical	8.19% (95th)	KEV	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63520US	—	0.96% (61st)	Exploit	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-33112US	—	31.1% (98th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-40364US	—	4.42% (91st)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-66808US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-66805US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65663US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65658US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64901US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63514US	—	2.04% (81st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-35439US	—	2.03% (81st)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-33110US	—	1.97% (80th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-63516US	—	1.87% (79th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2020-17091US	medium4.4	1.86% (79th)	—	no fix	2020-11-11	≤ N/A
CVE-2026-40368US	—	1.82% (79th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-40357US	—	1.70% (77th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-70321US	—	1.69% (77th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65665US	—	1.69% (77th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-50515US	—	1.69% (77th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2023-24881US	—	1.50% (74th)	—	2.10.1	2023-07-11	2.0.0 → 2.10.1
CVE-2026-62837US	—	1.23% (69th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70306US	—	1.01% (63rd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-40365US	—	0.96% (61st)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-70324US	—	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-64921US	—OT elevated	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62827US	—	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65768US	critical9.8	0.94% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65769US	high7.5	0.92% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70328US	—	0.92% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70327US	—	0.92% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62839US	—	0.91% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-58639US	—	0.91% (60th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70332US	—	0.86% (58th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-70329US	—	0.82% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65807US	—	0.82% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-65667US	—OT elevated	0.80% (56th)	—	no fix	2026-08-07	3 versions
CVE-2026-70355US	high8.7	0.78% (56th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-70326US	—	0.78% (56th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-63512US	—OT elevated	0.73% (54th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-33823US	medium6.5	0.72% (54th)	—	no fix	2026-05-07	3 versions
CVE-2026-62896US	—	0.69% (53rd)	—	no fix	2026-08-07	3 versions
CVE-2026-62882US	—	0.67% (52nd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-21535US	high7.5	0.65% (51st)	—	no fix	2026-02-19	—
CVE-2026-64900US	medium5.4	0.65% (51st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-62836US	critical10.0	0.65% (51st)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-57105US	medium5.4	0.62% (49th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-40421US	—	0.62% (49th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-65767US	high7.6	0.61% (49th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-40361US	—	0.60% (49th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-64922US	medium5.4	0.58% (48th)	—	no fix	2026-08-11	≤ vers:unknown/*

showing 50 of 158

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow33 CVEs
CWE-125Out-of-bounds Read25 CVEs
CWE-502Deserialization of Untrusted Data15 CVEs
CWE-20Improper Input Validation12 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12 CVEs
CWE-121Stack-based Buffer Overflow9 CVEs
CWE-416Use After Free8 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)155 CVEs
EUEU Vulnerability Database (ENISA)7 CVEs
USMicrosoft MSRC (CSAF)4 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan