CVE-2025-53783

Microsoft Teams Remote Code Execution Vulnerability

State: Published
Severity: 7.5 High
Published: Aug 12, 2025
Updated: Feb 13, 2026
Reserved: Jul 9, 2025

Description

Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	microsoft

Weaknesses

CWE-122 Heap-based Buffer Overflow

Affected Products

Product	Versions
Microsoft Teams for AndroidMicrosoft	1.0.0 to before 1416/1.0.0.2025102802Affected
Microsoft Teams for DesktopMicrosoft	1.0.0 to before 25122.1415.3698.6812Affected
Microsoft Teams for iOSMicrosoft	2.0.0 to before 7.10.1 (100772025102901)Affected
Microsoft Teams for Mac, New EditionMicrosoft	1.0.0.0 to before 25122.1207.3700.1444Affected
Teams for D365 Guides HoloLensMicrosoft	907.0000 to before 907.2505.29001.0Affected
Teams for D365 Remote Assist HoloLensMicrosoft	316.0000 to before 316.2505.28001Affected
Teams PanelMicrosoft	1.0.97 to before 1449/1.0.97.2025102203Affected
Teams PhoneMicrosoft	1.0.94 to before 1449/1.0.94.2025168802Affected

References

Microsoft Teams Remote Code Execution Vulnerabilityvendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.