CVE-2025-49731lowCWE-280

CVE-2025-49731: falha de baixa gravidade em Microsoft Teams for Android

Microsoft Teams Elevation of Privilege Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Microsoft Teams+ Monitorar Microsoft Teams for Desktop

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.1epss 0.5%
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Teams for AndroidMicrosoft · Microsoft Teams for DesktopMicrosoft · Microsoft Teams for iOS
CVEs relacionadas — Microsoft Teams for Android

No mesmo produto, das mais perigosas para as menos.

CVE-2024-38197MEDIUMMicrosoft Teams for iOS Spoofing VulnerabilityEPSS 16.8%CVE-2021-24114MEDIUMMicrosoft Teams iOS Information Disclosure VulnerabilityEPSS 3.2%CVE-2022-21965HIGHMicrosoft Teams Denial of Service VulnerabilityEPSS 3.0%CVE-2023-29328HIGHMicrosoft Teams Remote Code Execution VulnerabilityEPSS 2.2%CVE-2023-29330HIGHMicrosoft Teams Remote Code Execution VulnerabilityEPSS 2.0%CVE-2026-42835HIGHMicrosoft Teams for Android Information Disclosure VulnerabilityEPSS 1.3%