CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 11/08/2026 |
| CVE-2026-65767 | 높음7.6 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network. | 11/08/2026 |
| CVE-2026-42835 | 높음8.1 | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. | 09/06/2026 |
| CVE-2026-32185 | 보통5.5 | Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. | 12/05/2026 |
| CVE-2026-26133 | 높음7.1 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. | 16/03/2026 |
| CVE-2025-53783 | 높음7.5 | Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. | 12/08/2025 |
| CVE-2025-49737 | 높음7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally. | 08/07/2025 |
| CVE-2025-49731 | 낮음3.1 | Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network. | 08/07/2025 |
| CVE-2024-42004 | 심각9.8 | A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then mak | 18/12/2024 |
| CVE-2024-41145 | 심각9.8 | A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger t | 18/12/2024 |
| CVE-2024-41138 | 심각9.8 | A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start | 18/12/2024 |
| CVE-2024-38197 | 보통6.5 | Microsoft Teams for iOS Spoofing Vulnerability | 13/08/2024 |
| CVE-2024-21448 | 보통5.0 | Microsoft Teams for Android Information Disclosure Vulnerability | 12/03/2024 |
| CVE-2024-21374 | 보통5.0 | Microsoft Teams for Android Information Disclosure Vulnerability | 13/02/2024 |
| CVE-2023-4863KEV | 높음8.8 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) | 12/09/2023 |
| CVE-2023-29330 | 높음8.8 | Microsoft Teams Remote Code Execution Vulnerability | 08/08/2023 |
| CVE-2023-29328 | 높음8.8 | Microsoft Teams Remote Code Execution Vulnerability | 08/08/2023 |