CVE-2026-65667

Analyzed Analyzed - Analysis Complete

Microsoft Teams Privilege Escalation via Missing Authorization

Publication date: 2026-08-07

Last updated on: 2026-08-11

Assigner: Microsoft Corporation

Description

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-07

Last Modified

2026-08-11

Generated

2026-08-27

AI Q&A

2026-08-07

EPSS Evaluated

2026-08-26

NVD

CVE-2026-65667

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	teams	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a missing authorization issue in Microsoft Teams. It allows an unauthorized attacker to elevate their privileges over a network without proper access controls.

Impact Analysis

An attacker could gain higher privileges in Microsoft Teams, potentially accessing sensitive data, impersonating users, or performing unauthorized actions within the platform.

Compliance Impact

This vulnerability allows unauthorized privilege escalation in Microsoft Teams, which could lead to unauthorized access to sensitive data. This may violate compliance requirements under GDPR and HIPAA by enabling unauthorized data exposure or modification.

Mitigation Strategies

Apply the latest security update from Microsoft for Teams immediately to address the missing authorization issue. Monitor Microsoft's official advisory for patches and ensure all systems are updated.

Hi! I’m here to help you understand CVE-2026-65667. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70