Description
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Teams for Mac, New Edition | 1.0.0.0 – < 25163.3001.3726.6503 | 25163.3001.3726.6503 |
Advisories 3
- WID-SEC-2025-1491 Microsoft Office: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 22, 2025
- NCSC-2025-0215 Kwetsbaarheden verholpen in Microsoft Office NCSC-NL (Netherlands) · Jul 19, 2025
- MSRC-CVE-2025-49737 Microsoft Teams Elevation of Privilege Vulnerability Microsoft Security Response Center · Jul 8, 2025
References
- Microsoft Teams Elevation of Privilege Vulnerability vendor-advisory patch