CVE-2025-49731

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-49731
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

3.1 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49731 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*
cpe:2.3:a:microsoft:teams:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:microsoft:teams:-:*:*:*:*:windows:*:*
History

13 Feb 2026, 14:32

Type Values Removed Values Added
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49731 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49731 - Vendor Advisory
First Time Microsoft teams
Microsoft
CPE cpe:2.3:a:microsoft:teams:-:*:*:*:*:windows:*:*
cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*
cpe:2.3:a:microsoft:teams:*:*:*:*:*:iphone_os:*:*

10 Jul 2025, 13:18

Type Values Removed Values Added
Summary
  • (es) El manejo inadecuado de permisos o privilegios insuficientes en Microsoft Teams permite que un atacante autorizado eleve privilegios en una red.

08 Jul 2025, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-08 17:16

Updated : 2026-02-13 14:32

NVD link : CVE-2025-49731

Mitre link : CVE-2025-49731

CVE.ORG link : CVE-2025-49731

JSON object : View

Products Affected

microsoft

  • teams
CWE
CWE-280

Improper Handling of Insufficient Permissions or Privileges