Permissions, Privileges, and Access Controls in Microsoft products - CVE-2025-49731

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU112615

Permissions, Privileges, and Access Controls in Microsoft products - CVE-2025-49731

Published: July 9, 2025


Vulnerability identifier: #VU112615
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-49731
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in Microsoft Teams, which leads to security restrictions bypass and privilege escalation.


Affected software

Microsoft Teams for Android
Microsoft Teams for iOS
Microsoft Teams for Desktop

How to mitigate CVE-2025-49731

Install updates from vendor's website.

Microsoft Teams for Android - update to 1.0.0.2025112902 1.0.0.2025112902
Microsoft Teams for iOS - update to 7.10.1 100772025102901
Microsoft Teams for Desktop - update to 25060212643 25060212643

External References

Related Security Bulletins