3.1
Low
CVE-2025-49731 Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to…
Description
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Teams for Android 1.0 | 1.0.0 → < 1.0.0.2025112902 | 1.0.0.2025112902 |
| Microsoft Teams for iOS 2.0 | 2.0.0 → latest | No fix stated |
| Microsoft Teams for Desktop 1.0 | 1.0.0 → < 25060212643 | 25060212643 |
References
- Microsoft Teams Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Teams for Android
The 14 CVEs of Microsoft Teams for Android →
CVE-2026-65812
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to…
6.8
Medium
CVE-2026-69559
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a…
5.8
Medium
CVE-2026-65767
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android…
8.8
High
CVE-2026-65768
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows…
8.8
High