Stefan Weywith

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Online (affected versions not specified) **Description** Incorrect authorization allows an authorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Teams (affected versions not specified) **Description** An improper access control issue exists in Microsoft Teams. This allows an unauthorized attacker to disclose sensitive information over a network. The issue is due to insufficient validation or enforcement of access permissions within the application, enabling malicious actors to access data they should not have rights to. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.