Description
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Teams for Android | 1.0.0 – < 1416/1.0.0.2025102802 | 1416/1.0.0.2025102802 |
| Microsoft | Microsoft Teams for Desktop | 1.0.0 – < 25122.1415.3698.6812 | 25122.1415.3698.6812 |
| Microsoft | Microsoft Teams for iOS | 2.0.0 – < 7.10.1 (100772025102901) | 7.10.1 (100772025102901) |
| Microsoft | Microsoft Teams for Mac, New Edition | 1.0.0.0 – < 25122.1207.3700.1444 | 25122.1207.3700.1444 |
| Microsoft | Teams for D365 Guides HoloLens | 907.0000 – < 907.2505.29001.0 | 907.2505.29001.0 |
| Microsoft | Teams for D365 Remote Assist HoloLens | 316.0000 – < 316.2505.28001 | 316.2505.28001 |
| Microsoft | Teams Panel | 1.0.97 – < 1449/1.0.97.2025102203 | 1449/1.0.97.2025102203 |
| Microsoft | Teams Phone | 1.0.94 – < 1449/1.0.94.2025168802 | 1449/1.0.94.2025168802 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
ksgassama-lab/MSTeams---Vulnerability---Remediation ★ 0 · Jan 14, 2026
Automated remediation of CVE-2025-53783 (Teams RCE) using PowerShell
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 4
- MSRC-CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability Microsoft Security Response Center · Oct 30, 2025
- NCSC-2025-0250 Kwetsbaarheden verholpen in Microsoft Office NCSC-NL (Netherlands) · Aug 13, 2025
- WID-SEC-2025-1787 Microsoft Office Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 12, 2025
- WID-SEC-2025-1773 Microsoft Teams Geräte: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Aug 12, 2025
References
- Microsoft Teams Remote Code Execution Vulnerability vendor-advisory patch