CVE-2024-21374
MediumCVSS 5.0Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Information disclosure vulnerability in Microsoft Teams for Android. May allow access to sensitive data.
Risk Assessment
Information disclosure can compromise user privacy and lead to leakage of corporate data.
Recommendation
Update Microsoft Teams on Android to the latest version with the security fix.
Other vulnerabilities in Microsoft Teams
See all- CVE-2026-65667Critical
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-62896Critical
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
- CVE-2026-33823Critical
Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.
- CVE-2026-62918High
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
- CVE-2023-29330High
Remote code execution vulnerability in Microsoft Teams. An attacker could exploit it to execute code on the victim's computer.
- CVE-2023-29328High
Remote code execution vulnerability in Microsoft Teams. An attacker could exploit this flaw to execute code on the victim's system.
Original NVD description (English source)
Microsoft Teams for Android Information Disclosure Vulnerability