microsoft teams

Name: microsoft teams
Brand: microsoft

productUS

cpe:2.3:a:microsoft:teams:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical5high6medium1low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4863US	high8.8OT critical	100.0% (100th)	KEV	1.6.00.26463	2023-09-12	2 versions
CVE-2025-53783US	—	0.81% (57th)	Exploit	7.10.1	2025-08-12	4 versions
CVE-2024-38197US	—	16.8% (97th)	—	no fix	2024-08-13	≤ 6.19.2
CVE-2019-5922US	high7.8	4.61% (92nd)	—	no fix	2019-03-12	—
CVE-2021-24114US	low3.5	3.16% (88th)	—	no fix	2021-02-25	—
CVE-2022-21965US	medium5.0	2.96% (87th)	—	1.0.94.20000	2022-02-09	2 versions
CVE-2020-10146US	medium5.4	2.32% (83rd)	—	2020-10-29	2020-12-09	< 2020-10-29
CVE-2023-29328US	—	2.15% (82nd)	—	5.12.1	2023-08-08	4 versions
CVE-2023-29330US	—	2.00% (81st)	—	5.12.1	2023-08-08	4 versions
CVE-2020-17091US	medium4.4	1.86% (79th)	—	no fix	2020-11-11	—
CVE-2023-24881US	—	1.50% (74th)	—	2.10.1	2023-07-11	< 2.10.1
CVE-2026-42835US	—	1.26% (69th)	—	1.0.76.2026111302	2026-06-09	< 1.0.76.2026111302
CVE-2024-21448US	—	1.24% (69th)	—	1.0.0.2024022302	2024-03-12	< 1.0.0.2024022302
CVE-2024-21374US	—	0.97% (62nd)	—	1.0.0.2024022302	2024-02-13	< 1.0.0.2024022302
CVE-2026-65768US	critical9.8	0.94% (61st)	—	1.0.0.2026133602	2026-08-11	< 1.0.0.2026133602
CVE-2026-65769US	high7.5	0.92% (60th)	—	8.8.1	2026-08-11	< 8.8.1
CVE-2024-41138US	critical9.8	0.91% (60th)	—	no fix	2024-12-18	= 24046.2813.2770.1094
CVE-2026-65812US	medium6.8	0.89% (59th)	—	1.0.0.2026133602	2026-09-08	< 1.0.0.2026133602
CVE-2024-42004US	critical9.8	0.81% (57th)	—	no fix	2024-12-18	= 24046.2813.2770.1094
CVE-2024-41145US	critical9.8	0.80% (56th)	—	no fix	2024-12-18	= 24046.2813.2770.1094
CVE-2026-65667US	—OT elevated	0.80% (56th)	—	no fix	2026-08-07	—
CVE-2026-33823US	medium6.5	0.72% (54th)	—	no fix	2026-05-07	—
CVE-2026-62896US	—	0.69% (53rd)	—	no fix	2026-08-07	—
CVE-2026-21535US	high7.5	0.65% (51st)	—	no fix	2026-02-19	—
CVE-2026-65767US	high7.6	0.61% (49th)	—	1.0.76.202611302	2026-08-11	< 1.0.76.202611302
CVE-2026-62918US	—	0.50% (42nd)	—	no fix	2026-08-07	—
CVE-2025-49731US	—	0.48% (41st)	—	7.10.1	2025-07-08	3 versions
CVE-2026-32185US	—	0.47% (40th)	—	1.0.0.2026092103	2026-05-12	< 1.0.0.2026092103
CVE-2026-26133US	—	0.44% (38th)	—	8.3.1	2026-03-16	2 versions
CVE-2026-69559US	medium6.3	0.32% (25th)	—	1.0.0.2026142702	2026-09-08	< 1.0.0.2026142702
CVE-2025-49737US	—	0.21% (11th)	—	25163.3001.3726.6503	2025-07-08	< 25163.3001.3726.6503

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-347Improper Verification of Cryptographic Signature4 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-416Use After Free2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan