Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?
An attacker who successfully exploited this vulnerability could gain high privileges, which include read, write, and delete functionality.
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment of the targeted component.
Security updates
316.2505.28001 — https://learn.microsoft.com/en-us/dynamics365/mixed-reality/remote-assist/whats-new#june-10-2025
1449/1.0.97.2025102203 — https://learn.microsoft.com/en-us/microsoftteams/devices/devices-release-notes?tabs=panels#tabpanel_1_panels
1449/1.0.94.2025168802 — https://learn.microsoft.com/en-us/microsoftteams/devices/devices-release-notes?tabs=phones#tabpanel_1_panels
907.2505.29001.0 — https://learn.microsoft.com/en-us/dynamics365/mixed-reality/guides/new#june-10-2025
1416/1.0.0.2025102802 — https://play.google.com/store/apps/details?id=com.microsoft.teams
7.10.1 (100772025102901) — https://apps.apple.com/us/app/microsoft-teams/id1113153706
25122.1415.3698.6812 — https://docs.microsoft.com/en-us/microsoftteams/teams-client-update
25122.1207.3700.1444 — https://learn.microsoft.com/en-us/officeupdates/teams-app-versioning
Vulnerabilities 1
-
High 7.5CVE-2025-53783 Public exploit
Microsoft Teams Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
Revision history
-
#2
Updated product information in the Software Update table. This is an informational change only.
-
#1
Information published.
References
-
CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss