Product:
Microsoft Teams
Summary
Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network. This vulnerability can lead to significant confidentiality and integrity impacts. Attackers with low privileges can exploit this issue without user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.6 | CVE-2026-33823 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to Microsoft Teams. They can then leverage the improper authorization to access sensitive information over the network. The attack complexity is low, making it easier for attackers to execute their plans without requiring advanced skills.
Affected Products
- Microsoft Teams: A collaboration platform that integrates workplace chat, video meetings, file storage, and application integration.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should also review their access controls and ensure that only authorized personnel have access to sensitive information within Microsoft Teams.