Microsoft Teams Bugs: Blocks Emergency calls, unpatched phishing vulnerability since March 2021

guest · Dec 23, 2021

December 23, 2021

Since March 2021, Microsoft has been aware of four vulnerabilities in Teams that allow phishing via the link preview. And on Android, it can happen that Microsoft Teams blocks emergency calls. Here's a quick overview.
Click to expand...

Phishing vulnerabilities in Microsoft Teams
Fabian Bräunlein, founder of German security firm Positive Security, encountered four vulnerabilities in Microsoft Teams back in the spring of 2021, which he reported to the Microsoft Security Response Center (MSRC) on March 10, 2021, according to this blog post.
Fabian Bräunlein and his team had encountered the four vulnerabilities listed below.

1 – Server-Side Request Forgery

2 – URL preview spoofing

3 – IP address leak

4 – Message of Death (DoS)

Click to expand...

Teams blocked emergency calls in Android
In mid-December 2021, it became known through various reports (I didn't have this on the blog, as I located it to emergency calls in the US) that users who had Microsoft Teams installed on Android may not be able to place emergency calls to 911. I'll link to this post from PC Magazine (English).
There the boundary conditions and implications are explained.
Click to expand...

Positive Security: MS Teams: 1 feature, 4 vulnerabilities

TL;DR:

We stumbled upon 4 vulnerabilities in Microsoft Team's link preview feature

The vulnerabilities allow accessing internal Microsoft services, spoofing the link preview, and, for Android users, leaking their IP address and DoS'ing their Teams app/channels

We reported the issues to Microsoft in March 2021, who has only remediated one so far

Click to expand...

reasonablePrivacy · Dec 24, 2021

There were a serious privacy issue with Teams. Maybe just in a company that I work for. After leaving a call (leave button) window disappeared, but you were still there. Participants could still see and hear you...

Apart from security & privacy issues statuses being all over the place is a norm. Last week I saw someone's profile with OoO icon (Out of Office) with text stating he is not OoO and to do not trust his OoO Teams status...

JRViejo · May 19, 2022

Microsoft Teams. It’s an app I use occasionally. But I don’t want it to auto launch. I want it out of the way and only launched when I want it. But Microsoft clearly doesn’t agree with me. It’s even more annoying when I’m setting up Office and I haven’t logged into Teams to then go into the settings and tell it to go away.

Fortunately there is a way you can disable the auto-launch even if you don’t have the login to Teams. And while you are there…. check out the other items autolaunching and disable accordingly.
Click to expand...

The annoyances of the default behavior in Teams - Susan Bradley, AskWoody

ronjor · Jun 13, 2022

Microsoft Teams now uses AI to improve echo, interruptions, and acoustics

By Tom Warren@tomwarren Jun 13, 2022
Your Teams calls should sound a lot better
Click to expand...

Log in or Sign up

Microsoft Teams Bugs: Blocks Emergency calls, unpatched phishing vulnerability since March 2021

guest Guest

reasonablePrivacy Registered Member

JRViejo Super Moderator

ronjor Global Moderator

Log in or Sign up

Microsoft Teams Bugs: Blocks Emergency calls, unpatched phishing vulnerability since March 2021

guest Guest

reasonablePrivacy Registered Member

JRViejo Super Moderator

ronjor Global Moderator

Useful Searches