ZDI-23-1541: (Pwn2Own) Microsoft Teams Incorrect Privilege Assignment Local Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Teams. An attacker must first obtain the ability to execute script within the application window in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.

application attacker attackers cvss escalation exploit local local privilege escalation microsoft microsoft teams order privilege privilege escalation privileges pwn2own rating script teams vulnerability window zdi