Description
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Teams for Android | 1.0.0 – < 1.0.0.2025112902 | 1.0.0.2025112902 |
| Microsoft | Microsoft Teams for Desktop | 1.0.0 – < 25060212643 | 25060212643 |
| Microsoft | Microsoft Teams for iOS | 2.0.0 – < 7.10.1 (100772025102901) | 7.10.1 (100772025102901) |
Advisories 3
- WID-SEC-2025-1491 Microsoft Office: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 22, 2025
- NCSC-2025-0215 Kwetsbaarheden verholpen in Microsoft Office NCSC-NL (Netherlands) · Jul 19, 2025
- MSRC-CVE-2025-49731 Microsoft Teams Elevation of Privilege Vulnerability Microsoft Security Response Center · Jul 8, 2025
References
- Microsoft Teams Elevation of Privilege Vulnerability vendor-advisory patch