Missing authorization in Microsoft Teams allows an attacker without proper credentials to elevate privileges across the network. The flaw enables unauthorized users to attain higher level access, potentially compromising confidential data and disrupting services. This weakness is a classic Missing Authorization problem as identified by CWE‑862.

The vulnerability affects Microsoft Teams, all versions distributed by Microsoft. No specific version range is listed, so administrators should treat all deployed Teams installations as potentially vulnerable until a patch is applied.

The CVSS score of 10 signals a critical severity. With no EPSS score available, the exploitation probability is unknown, but the lack of a KEV listing does not negate the risk. The attack can be launched from any remote network location where the attacker can interact with the Teams application, making the potential impact wide‑spread if exploited. Immediate patching mitigates the risk of privilege escalation and related data breaches.