Overview 44 matches · 0 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 3 public PoC · 1 EPSS ≥ 0.5
44matches
0in Waratek scope0.0%
0protected0.0%
1exploited2.3%
1CISA KEV2.3%
3public PoC6.8%
1EPSS ≥ 0.52.3%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
3
6.8%
Not applicable
41
93.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
44
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 13 / year
20101
Not applicable1
High1
not blocked1
Working exploit published1
20111
Not applicable1
High1
not blocked1
Working exploit published1
20120
20130
20140
20150
20160
20172
Not applicable2
High2
not blocked2
No public exploit2
20182
Not applicable2
High2
not blocked2
No public exploit2
20196
Not applicable6
High6
not blocked6
No public exploit6
20203
Not applicable3
High3
not blocked3
No public exploit3
20212
Outside Waratek scope2
High2
not blocked2
No public exploit2
20221
Not applicable1
High1
not blocked1
No public exploit1
202313
Outside Waratek scope1
Not applicable12
High13
not blocked13
Exploited1
No public exploit12
20242
Not applicable2
High2
not blocked2
No public exploit2
20253
Not applicable3
High3
not blocked3
No public exploit3
20268
Not applicable8
High8
not blocked8
Proof of concept only1
No public exploit7
201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-65769 | High | 2026-08-11 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-65767 | High | 2026-08-11 | Not applicable | No public exploit | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-62918 | High | 2026-08-07 | Not applicable | No public exploit | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-42835 | High | 2026-06-09 | Not applicable | No public exploit | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. |
| CVE-2026-26133 | High | 2026-03-16 | Not applicable | No public exploit | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-2476 | High | 2026-03-16 | Not applicable | No public exploit | Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settings via exported configuration data. Mattermost Advisory ID: MMSA-2026-00606 |
| CVE-2026-21535 | High | 2026-02-19 | Not applicable | No public exploit | Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network. |
| CVE-2022-50931 | High | 2026-01-13 | Not applicable | Proof of concept only | TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3client_win32.exe with custom files to potentially gain SYSTEM or Administrator-level access. |
| CVE-2025-53783 | High | 2025-08-12 | Not applicable | No public exploit | Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. |
| CVE-2025-49737 | High | 2025-07-08 | Not applicable | No public exploit | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally. |
| CVE-2025-20236 | High | 2025-04-16 | Not applicable | No public exploit | A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient input validation when Cisco Webex App processes a meeting invite link. An attacker could exploit this vulnerability by persuading a user to click a crafted meeting invite link and download arbitrary files. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the targeted user. |
| CVE-2024-20395 | High | 2024-07-17 | Not applicable | No public exploit | A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such as images. An attacker could exploit this vulnerability by sending a message with embedded media that is stored on a messaging server to a targeted user. If the attacker can observe transmitted traffic in a privileged network position, a successful exploit could allow the attacker to capture session token information from insecurely transmitted requests and possibly reuse the captured session information to take further actions as the targeted user. |
| CVE-2022-27540 | High | 2024-06-28 | Not applicable | No public exploit | A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. |
| CVE-2023-4863 | High | 2023-09-12 | Outside Waratek scope | Exploited | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) |
| CVE-2023-29330 | High | 2023-08-08 | Not applicable | No public exploit | Microsoft Teams Remote Code Execution Vulnerability |
| CVE-2023-29328 | High | 2023-08-08 | Not applicable | No public exploit | Microsoft Teams Remote Code Execution Vulnerability |
| CVE-2022-31639 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31638 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31637 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31636 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-31635 | High | 2023-06-13 | Not applicable | No public exploit | Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. |
| CVE-2022-43778 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2022-43777 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2022-27541 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2022-27539 | High | 2023-06-12 | Not applicable | No public exploit | Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. |
| CVE-2021-3439 | High | 2023-02-01 | Not applicable | No public exploit | HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities. |
| CVE-2022-21965 | High | 2022-02-09 | Not applicable | No public exploit | Microsoft Teams Denial of Service Vulnerability |
| CVE-2021-1536 | High | 2021-06-04 | Outside Waratek scope | No public exploit | A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path in the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of another user account. |
| CVE-2021-1502 | High | 2021-06-04 | Outside Waratek scope | No public exploit | A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. The vulnerability is due to insufficient validation of values within Webex recording files formatted as either Advanced Recording Format (ARF) or Webex Recording Format (WRF). An attacker could exploit the vulnerability by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user. |
| CVE-2020-17091 | High | 2020-11-11 | Not applicable | No public exploit | Microsoft Teams Remote Code Execution Vulnerability |
| CVE-2020-3535 | High | 2020-10-08 | Not applicable | No public exploit | A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file in a specific location on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with the privileges of another user’s account. |
| CVE-2020-3155 | High | 2020-03-04 | Not applicable | No public exploit | A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaboration endpoints if the products meet the conditions described in the Vulnerable Products section. The vulnerability is due to a lack of validation of the SSL server certificate received when establishing a connection to a Cisco Webex video device or a Cisco collaboration endpoint. An attacker could exploit this vulnerability by using man in the middle (MITM) techniques to intercept the traffic between the affected client and an endpoint, and then using a forged certificate to impersonate the endpoint. Depending on the configuration of the endpoint, an exploit could allow the attacker to view presentation content shared on it, modify any content being presented by the victim, or have access to call controls. This vulnerability does not affect cloud registered collaboration endpoints. |
| CVE-2019-1939 | High | 2019-09-05 | Not applicable | No public exploit | A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to visit a website designed to submit malicious input to the affected application. A successful exploit could allow the attacker to cause the application to modify files and execute arbitrary commands on the system with the privileges of the targeted user. |
| CVE-2019-15502 | High | 2019-08-29 | Not applicable | No public exploit | The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE). |
| CVE-2019-11351 | High | 2019-04-19 | Not applicable | No public exploit | TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework. |
| CVE-2019-5922 | High | 2019-03-12 | Not applicable | No public exploit | Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
| CVE-2019-1689 | High | 2019-02-25 | Not applicable | No public exploit | A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to upload arbitrary files within the scope of the iOS application. The vulnerability is due to improper input validation in the client application. An attacker could exploit this vulnerability by sending a malicious file to a targeted user and persuading the user to manually open it. An exploit could allow the attacker to overwrite sensitive application files and eventually cause a denial of service (DoS) condition by foreclosing future access to the system to the targeted user. This vulnerability is fixed in version 3.13.26920. |
| CVE-2019-1636 | High | 2019-01-23 | Not applicable | No public exploit | A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user if the attacker can place a crafted library in a directory that is accessible to the vulnerable system. |
| CVE-2018-0436 | High | 2018-10-05 | Not applicable | No public exploit | A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The vulnerability exists because the affected software performs insufficient checks for associations between user accounts and organization accounts. An attacker who has administrator or compliance officer privileges for one organization account could exploit this vulnerability by using those privileges to view and modify data for another organization account. No customer data was impacted by this vulnerability. |
| CVE-2018-0387 | High | 2018-07-18 | Not applicable | No public exploit | A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The vulnerability occurs because Cisco Webex Teams does not properly sanitize input. An attacker could exploit the vulnerability by sending a user a malicious link and persuading the user to follow the link. A successful exploit could allow the attacker to execute arbitrary code on the user's system. Cisco Bug IDs: CSCvh66250. |
| CVE-2017-8290 | High | 2017-07-06 | Not applicable | No public exploit | A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/2016 09:48:33), it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server. |
| CVE-2017-9982 | High | 2017-06-27 | Not applicable | No public exploit | TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the ᗪ Unicode character followed by the ༿ Unicode character. |
| CVE-2010-4941 | High | 2011-10-09 | Not applicable | Working exploit published | SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php. |
| CVE-2010-1338 | High | 2010-04-09 | Not applicable | Working exploit published | SQL injection vulnerability in ts_other.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action. |