7.5Hoch
CVE-2025-53783Microsoft Teams Remote Code Execution Vulnerability
Beschreibung
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
Schwachstellentyp (CWE):
CWE-122
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| microsoft | dynamics 365 guides | < 907.2505.29001.0 | |
| microsoft | dynamics 365 remote assist | < 316.2505.28001 | |
| Microsoft | Microsoft Teams for Android | 1.0.0 – < 1416/1.0.0.2025102802 | |
| Microsoft | Microsoft Teams for Desktop | 1.0.0 – < 25122.1415.3698.6812 | |
| Microsoft | Microsoft Teams for iOS | 2.0.0 – < 7.10.1 (100772025102901) | |
| Microsoft | Microsoft Teams for Mac, New Edition | 1.0.0.0 – < 25122.1207.3700.1444 | |
| microsoft | teams | 316.0000 – < 316.2505.28001 | |
| Microsoft | Teams for D365 Guides HoloLens | 907.0000 – < 907.2505.29001.0 | |
| Microsoft | Teams for D365 Remote Assist HoloLens | 316.0000 – < 316.2505.28001 | |
| Microsoft | Teams Panel | 1.0.97 – < 1449/1.0.97.2025102203 | |
| microsoft | teams panels | < 1.0.97.2025102203 | |
| Microsoft | Teams Phone | 1.0.94 – < 1449/1.0.94.2025168802 | |
| microsoft | teams phones | < 1.0.94.2025168802 |
Referenzen und Patches
- Microsoft Teams Remote Code Execution Vulnerability vendor-advisorypatchVendor Advisory
CPE-Treffer (NVD) (8)
cpe:2.3:a:microsoft:dynamics_365_guides:*:*:*:*:*:hololens:*:*< 907.2505.29001.0cpe:2.3:a:microsoft:dynamics_365_remote_assist:*:*:*:*:*:hololens:*:*< 316.2505.28001cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*< 1.0.0.2025102802cpe:2.3:a:microsoft:teams:*:*:*:*:*:iphone_os:*:*< 7.10.1cpe:2.3:a:microsoft:teams:*:*:*:*:*:macos:*:*< 25122.1207.3700.1444cpe:2.3:a:microsoft:teams:*:*:*:*:desktop:*:*:*< 25122.1415.3698.6812cpe:2.3:a:microsoft:teams_panels:*:*:*:*:*:*:*:*< 1.0.97.2025102203cpe:2.3:a:microsoft:teams_phones:*:*:*:*:*:*:*:*< 1.0.94.2025168802