漏洞描述 Microsoft Teams是美国微软(Microsoft)公司的一款用于在线会议、聊天、云存储功能的软件。 Microsoft Teams 24046.2813.2770.1094版本存在数据伪造问题漏洞,该漏洞源于在macOS版本中,特制的库可利用Teams的访问权限,从而导致权限绕过,恶意应用程序可以注入库并启动程序以触发此漏洞。
相关漏洞推荐 (CVE-2025-53770)Microsoft SharePoint Server反序列化漏洞允许远程代码执行 POC CVE-2019-0604: Microsoft SharePoint - Remote Code Execution POC CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution POC CVE-2000-0114: Microsoft FrontPage Extensions - Information Disclosure POC CVE-2008-1547: Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection POC CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution POC CVE-2020-0618: Microsoft SQL Server Reporting Services - Remote Code Execution POC CVE-2020-16952: Microsoft SharePoint - Remote Code Execution POC CVE-2021-26855: Microsoft Exchange Server SSRF Vulnerability POC CVE-2021-31195: Microsoft Exchange Server - Cross-Site Scripting POC CVE-2021-38647: Microsoft Open Management Infrastructure - Remote Code Execution POC CVE-2021-41349: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting POC CVE-2023-29357: Microsoft SharePoint - Authentication Bypass