What is CVE-2023-29328?

CVE-2023-29328 is a high-severity remote code execution vulnerability in Microsoft Teams across desktop, iOS, Android, and Mac platforms. This vulnerability allows attackers to execute malicious code on affected systems. Users should update their Microsoft Teams software to the latest version to mitigate this threat.

Who is impacted by CVE-2023-29328?

CVE-2023-29328 affects Microsoft Teams users on Android, macOS, Windows, and iOS platforms. Impacted versions include Microsoft Teams for Android up to version 1.0.0.2023070204, Microsoft Teams for macOS up to version 1.6.00.17554, Microsoft Teams for Windows up to version 1.6.00.18681, and Microsoft Teams for iOS up to version 5.12.1.

What to do if CVE-2023-29328 affected you

If you're affected by the CVE-2023-29328 vulnerability, it's crucial to update your Microsoft Teams application to the latest version. Here are the steps to follow:

1. Update Microsoft Teams for Desktop to version 1.6.00.18681

2. Update Microsoft Teams for Mac to version 1.6.00.17554

3. Update Microsoft Teams for Android to version 1.0.0.2023070204

4. Update Microsoft Teams for iOS to version 5.12.1

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-29328 vulnerability, also known as the Microsoft Teams Remote Code Execution Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. This high-severity vulnerability affects Microsoft Teams on various platforms and could allow an attacker to execute malicious code on affected systems. To mitigate this threat, users should update their Microsoft Teams application to the latest version.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-416, which is a Use After Free issue affecting Microsoft Teams on various platforms.

Learn More

For more information about the CVE-2023-29328 vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Microsoft Security Update Guide

• CVE Record