PT-2025-32857 · Microsoft · Teams

Published 2025-08-12 · Updated 2025-10-30 · CVE-2025-53783

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Teams versions prior to 25122.1415.3698.6812

Description A heap-based buffer overflow exists in Microsoft Teams, potentially allowing an unauthorized attacker to execute code over a network. Exploitation may involve malicious links or files, and with user interaction, attackers could read, write, or delete messages. The vulnerability impacts the Real Time Media Manager component.

Recommendations Update Microsoft Teams to version 25122.1415.3698.6812 or later.

Fix

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-10048

CVE-2025-53783

ZDI-25-839

Affected Products

Teams

References · 27

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53783 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53783 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53783 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-839 · Security Note
• https://bdu.fstec.ru/vul/2025-10048 · Security Note
• https://twitter.com/TweetThreatNews/status/1955651758891393404 · Twitter Post
• https://twitter.com/windowsforum/status/1955344276507746424 · Twitter Post
• https://twitter.com/grok/status/1956656777178800538 · Twitter Post
• https://twitter.com/compuchris/status/1955688492295405773 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1957539173058941336 · Twitter Post
• https://t.me/cKure/16130 · Telegram Post
• https://twitter.com/f1tym1/status/1955621504181223797 · Twitter Post
• https://t.me/msrcreports/2246 · Telegram Post
• https://twitter.com/grok/status/1956657369557188897 · Twitter Post
• https://twitter.com/wvipersg/status/1955603706352656407 · Twitter Post