Vulnerability · Published Aug 12, 2025 · Assigned by microsoft
CVE-2025-53783Microsoft Teams Remote Code Execution Vulnerability
High 7.5
In plain English
A high-severity heap buffer overflow in Microsoft Teams for Android from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 40.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Teams for Android | 1.0.0 – before 1416/1.0.0.2025102802 |
| Microsoft | Microsoft Teams for Desktop | 1.0.0 – before 25122.1415.3698.6812 |
| Microsoft | Microsoft Teams for iOS | 2.0.0 – before 7.10.1 (100772025102901) |
| Microsoft | Microsoft Teams for Mac, New Edition | 1.0.0.0 – before 25122.1207.3700.1444 |
| Microsoft | Teams for D365 Guides HoloLens | 907.0000 – before 907.2505.29001.0 |
| Microsoft | Teams for D365 Remote Assist HoloLens | 316.0000 – before 316.2505.28001 |
| Microsoft | Teams Panel | 1.0.97 – before 1449/1.0.97.2025102203 |
| Microsoft | Teams Phone | 1.0.94 – before 1449/1.0.94.2025168802 |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
References
- Microsoft Teams Remote Code Execution Vulnerability vendor-advisory, patch