{"id":"CVE-2025-53783","state":"PUBLISHED","title":"Microsoft Teams Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.","publishedAt":"2025-08-12T17:10:41.147Z","updatedAt":"2026-02-13T18:54:55.321Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Microsoft Teams for Android","Microsoft Microsoft Teams for Desktop","Microsoft Microsoft Teams for iOS","Microsoft Microsoft Teams for Mac, New Edition","Microsoft Teams for D365 Guides HoloLens","Microsoft Teams for D365 Remote Assist HoloLens","Microsoft Teams Panel","Microsoft Teams Phone"],"affected":[{"vendor":"Microsoft","product":"Microsoft Teams for Android","versions":[{"version":"1.0.0","status":"affected","lessThan":"1416/1.0.0.2025102802","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Teams for Desktop","versions":[{"version":"1.0.0","status":"affected","lessThan":"25122.1415.3698.6812","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Teams for iOS","versions":[{"version":"2.0.0","status":"affected","lessThan":"7.10.1 (100772025102901)","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Teams for Mac, New Edition","versions":[{"version":"1.0.0.0","status":"affected","lessThan":"25122.1207.3700.1444","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams for D365 Guides HoloLens","versions":[{"version":"907.0000","status":"affected","lessThan":"907.2505.29001.0","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams for D365 Remote Assist HoloLens","versions":[{"version":"316.0000","status":"affected","lessThan":"316.2505.28001","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams Panel","versions":[{"version":"1.0.97","status":"affected","lessThan":"1449/1.0.97.2025102203","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams Phone","versions":[{"version":"1.0.94","status":"affected","lessThan":"1449/1.0.94.2025168802","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783"],"weaknesses":["CWE-122"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/53xxx/CVE-2025-53783.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-53783","state":"PUBLISHED","datePublished":"2025-08-12T17:10:41.147Z","dateUpdated":"2026-02-13T18:54:55.321Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2025-07-09T13:25:25.502Z"},"containers":{"cna":{"title":"Microsoft Teams Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network."}],"affected":[{"vendor":"Microsoft","product":"Microsoft Teams for Android","versions":[{"version":"1.0.0","status":"affected","lessThan":"1416/1.0.0.2025102802","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Teams for Desktop","versions":[{"version":"1.0.0","status":"affected","lessThan":"25122.1415.3698.6812","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Teams for iOS","versions":[{"version":"2.0.0","status":"affected","lessThan":"7.10.1 (100772025102901)","versionType":"custom"}]},{"vendor":"Microsoft","product":"Microsoft Teams for Mac, New Edition","versions":[{"version":"1.0.0.0","status":"affected","lessThan":"25122.1207.3700.1444","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams for D365 Guides HoloLens","versions":[{"version":"907.0000","status":"affected","lessThan":"907.2505.29001.0","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams for D365 Remote Assist HoloLens","versions":[{"version":"316.0000","status":"affected","lessThan":"316.2505.28001","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams Panel","versions":[{"version":"1.0.97","status":"affected","lessThan":"1449/1.0.97.2025102203","versionType":"custom"}]},{"vendor":"Microsoft","product":"Teams Phone","versions":[{"version":"1.0.94","status":"affected","lessThan":"1449/1.0.94.2025168802","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783","name":"Microsoft Teams Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-122","description":"CWE-122: Heap-based Buffer Overflow","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-02-13T18:54:55.321Z"},"datePublic":"2025-08-12T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:*:*:*","versionStartIncluding":"316.0000","versionEndExcluding":"316.2505.28001"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.97","versionEndExcluding":"1449/1.0.97.2025102203"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.94","versionEndExcluding":"1449/1.0.94.2025168802"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:*:*:*","versionStartIncluding":"907.0000","versionEndExcluding":"907.2505.29001.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1416/1.0.0.2025102802"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:iphone_os:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"7.10.1 (100772025102901)"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"25122.1415.3698.6812"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:new:*:*:*","versionStartIncluding":"1.0.0.0","versionEndExcluding":"25122.1207.3700.1444"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-08-12T20:07:17.024025Z","id":"CVE-2025-53783","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-08-12T20:07:30.210Z"}}]}}}