Patch & vulnerability status
Microsoft Corporation
Teams Classic Slimcore 2024.04.01.37
Latest tracked version 2024.04.01.37. Release status, tracked CVEs, and automated cross-platform patching for Teams Classic Slimcore.
| Platform | Latest version | CVEs tracked | Last checked |
|---|---|---|---|
| Windows | 2024.04.01.37 | 23 | 2024-08-23 |
Known vulnerabilities (CVEs) in Teams Classic Slimcore
Lavawall tracks 23 published CVEs affecting Teams Classic Slimcore, and deploys the versions that fix them automatically across your fleet.
| CVE | Published | Severity | Details | Vector |
|---|---|---|---|---|
| CVE-2026-65667 | 2026-08-07 00:16:39 | CRITICAL (10) | Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. | NETWORK |
| CVE-2026-62918 | 2026-08-07 00:16:37 | HIGH (8) | Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. | NETWORK |
| CVE-2026-62896 | 2026-08-07 00:16:37 | CRITICAL (10) | Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. | NETWORK |
| CVE-2026-42835 | 2026-06-09 17:17:09 | HIGH (8) | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. | NETWORK |
| CVE-2026-33823 | 2026-05-07 22:16:34 | CRITICAL (10) | Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network. | NETWORK |
| CVE-2026-32185 | 2026-05-12 18:16:59 | MEDIUM (6) | Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally. | LOCAL |
| CVE-2026-21535 | 2026-02-19 23:16:24 | HIGH (8) | Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network. | NETWORK |
| CVE-2025-53783 | 2025-08-12 18:15:47 | HIGH (8) | Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. | NETWORK |
| CVE-2024-42004 | 2024-12-18 23:15:08 | HIGH (7) | A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. | LOCAL |
| CVE-2024-41145 | 2024-12-18 23:15:08 | HIGH (7) | A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. | LOCAL |
| CVE-2024-41138 | 2024-12-18 23:15:08 | HIGH (7) | A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. | LOCAL |
| CVE-2024-38197 | 2024-08-13 18:15:29 | MEDIUM (7) | Microsoft Teams for iOS Spoofing Vulnerability | NETWORK |
| CVE-2024-21448 | 2024-03-12 17:15:54 | MEDIUM (5) | Microsoft Teams for Android Information Disclosure Vulnerability | LOCAL |
| CVE-2024-21374 | 2024-02-13 18:15:55 | MEDIUM (5) | Microsoft Teams for Android Information Disclosure Vulnerability | LOCAL |
| CVE-2023-4863 | 2023-09-12 15:15:24 | HIGH (9) | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) | NETWORK |
| CVE-2023-29330 | 2023-08-08 18:15:12 | HIGH (9) | Microsoft Teams Remote Code Execution Vulnerability | NETWORK |
| CVE-2023-29328 | 2023-08-08 18:15:12 | HIGH (9) | Microsoft Teams Remote Code Execution Vulnerability | NETWORK |
| CVE-2023-24881 | 2023-07-11 17:15:13 | MEDIUM (7) | Microsoft Teams Information Disclosure Vulnerability | NETWORK |
| CVE-2022-21965 | 2022-02-09 17:15:09 | HIGH (8) | Microsoft Teams Denial of Service Vulnerability | NETWORK |
| CVE-2021-24114 | 2021-02-25 23:15:17 | MEDIUM (6) | Microsoft Teams iOS Information Disclosure Vulnerability | NETWORK |
| CVE-2020-17091 | 2020-11-11 07:15:19 | HIGH (8) | Microsoft Teams Remote Code Execution Vulnerability | LOCAL |
| CVE-2020-10146 | 2020-12-09 01:15:12 | MEDIUM (6) | The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020. | NETWORK |
| CVE-2019-5922 | 2019-03-12 22:29:01 | MEDIUM (7) | Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. | NETWORK |
Why keeping Teams Classic Slimcore patched matters
Unpatched third-party applications are one of the most common ways attackers get in: 57% of breached MSP clients and 32% of ransomware cases trace back to a missing patch. Every Teams Classic Slimcore release that fixes a security bug is public, so attackers see it too, and an out-of-date install becomes a documented way in. Tracking the installed version on every machine and closing the gap quickly is what turns a disclosed CVE into a non-event.
How Lavawall® patches Teams Classic Slimcore
Lavawall® watches Teams Classic Slimcore releases and CVEs continuously, ranks each update by risk, and deploys it across your whole fleet, Windows, macOS, and Linux, from a single agent, independently of your RMM. You get one place to see which machines are behind on Teams Classic Slimcore, one policy to bring them current, and timestamped evidence for audits.
Frequently asked questions
What is the latest version of Teams Classic Slimcore?
Lavawall tracks Teams Classic Slimcore at version 2024.04.01.37 (last checked 2024-08-23). New releases are monitored continuously and can be deployed automatically across your fleet.
Lavawall tracks Teams Classic Slimcore at version 2024.04.01.37 (last checked 2024-08-23). New releases are monitored continuously and can be deployed automatically across your fleet.
Does Teams Classic Slimcore have known security vulnerabilities (CVEs)?
Lavawall tracks 23 CVEs for Teams Classic Slimcore and remediates them automatically as part of patching.
Lavawall tracks 23 CVEs for Teams Classic Slimcore and remediates them automatically as part of patching.
How do I patch Teams Classic Slimcore automatically?
Deploy the Lavawall® agent and Teams Classic Slimcore updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Deploy the Lavawall® agent and Teams Classic Slimcore updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Lavawall® monitors releases and CVEs for Teams Classic Slimcore through public information and proprietary statistical analysis, and can patch it automatically across your fleet.