CVE-2026-65667
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can gain elevated privileges, potentially leading to unauthorized access to sensitive information and disruption of the service.
Recommendation
Apply security updates provided by Microsoft for Teams and monitor activity for unauthorized privilege changes.
Other vulnerabilities in Microsoft Teams
See all- CVE-2026-62896Critical
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
- CVE-2026-33823Critical
Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.
- CVE-2026-65812Medium
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
- CVE-2026-62918High
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
- CVE-2024-21374Medium
Information disclosure vulnerability in Microsoft Teams for Android. May allow access to sensitive data.
- CVE-2023-29330High
Remote code execution vulnerability in Microsoft Teams. An attacker could exploit it to execute code on the victim's computer.
- CVE-2023-29328High
Remote code execution vulnerability in Microsoft Teams. An attacker could exploit this flaw to execute code on the victim's system.
Original NVD description (English source)
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.