Teams
Vendor:
First CVE: Mar 12, 2019 · Active for 7 years
23
Total CVEs
More Total CVEs than 95% of tracked products
2.9
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
4.3%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Teams over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 12, 2019
7 years ago
Most Recent CVE
Jun 9, 2026
45 days ago
CVE Severity & Scoring
Teams23 CVEs
30%
48%
17%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local6 (26.1%)
Network17 (73.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low20 (87.0%)
High3 (13.0%)
Unknown0 (0.0%)
User Interaction
None10 (43.5%)
Unknown0 (0.0%)
Required13 (56.5%)
Privileges Required
Low8 (34.8%)
High0 (0.0%)
None15 (65.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (23 CVEs).
23 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-4863HIGH Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pag | Sep 12, 2023 | 8.8 | 96 | YES | NO |
CVE-2026-33823CRITICAL Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network. | May 7, 2026 | 9.6 | 39 | NO | NO |
CVE-2026-42835HIGH Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose informat | Jun 9, 2026 | 8.1 | 37 | NO | NO |
CVE-2024-41145CRITICAL A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage | Dec 18, 2024 | 9.8 | 30 | NO | NO |
CVE-2025-53783HIGH Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. | Aug 12, 2025 | 7.5 | 29 | NO | NO |
CVE-2024-38197MEDIUM Microsoft Teams for iOS Spoofing Vulnerability | Aug 13, 2024 | 6.5 | 29 | NO | NO |
CVE-2026-21535HIGH Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network. | Feb 19, 2026 | 7.5 | 28 | NO | NO |
CVE-2024-42004CRITICAL A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, lea | Dec 18, 2024 | 9.8 | 28 | NO | NO |
CVE-2019-5922HIGH Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. | Mar 12, 2019 | 7.8 | 28 | NO | NO |
CVE-2026-32185MEDIUM Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. | May 12, 2026 | 5.5 | 27 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (23 CVEs).
CISA KEV
1 CVE
4.3% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (23 CVEs).
Media Mentions
Signals from CVEs in this product scope (23 CVEs).
Top CNAs Publishing CVEs For Teams
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 24046.2813.2770.1094 | 3 | 9.8 | 0.8% | 0 | 0 |