ZDI-CAN-20812: ZDI-23-1767: Microsoft Teams Isolated Webview Prototype Pollution Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Teams. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-20812?
ZDI-CAN-20812 has been assigned a CVSS rating of 7, indicating it is a high severity vulnerability.
How do I fix ZDI-CAN-20812?
To address ZDI-CAN-20812, ensure that you update Microsoft Teams to the latest version provided by Microsoft.
What type of vulnerability is ZDI-CAN-20812?
ZDI-CAN-20812 is a privilege escalation vulnerability that allows remote attackers to gain elevated permissions.
What is required to exploit ZDI-CAN-20812?
Exploitation of ZDI-CAN-20812 requires user interaction, such as visiting a malicious webpage or opening a malicious file.
Which software is affected by ZDI-CAN-20812?
ZDI-CAN-20812 affects installations of Microsoft Teams.