What is CVE-2021-24114?

CVE-2021-24114 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Teams iOS Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-24114 cover?

CVE-2021-24114 covers the following CVE IDs: CVE-2021-24114. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-24114?

CVE-2021-24114 has a CVSS v3 base score of 5.7, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-24114?

CVE-2021-24114 affects 1 product, including: Microsoft Teams for iOS.

CVE-2021-24114HighCVSS 5.7

Microsoft Teams iOS Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

February 9, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-24114 →

📋 Description

What type of information could be disclosed by this vulnerability? This vulnerability exposes the Skype token value in the preview URL for images in Teams iOS app.

How do I get the update for Microsoft Teams for iOS? Tap the Settings icon Tap the** iTunes & App Store** Turn on AUTOMATIC DOWNLOADS for Apps Alternatively Tap the** App Store** icon Scroll down to find Microsoft Teams Tap the Update button

🎯 Affected products1

Microsoft Teams for iOS

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24114
patchhttps://apps.apple.com/us/app/microsoft-teams/id1113153706