First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-38197

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Microsoft Teams for iOS Spoofing Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Teams for iOS	>= 2.0.0, < 7.13.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38197Patch, Vendor Advisory

Timeline

Published: Aug 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-381987.5Windows Print Spooler Elevation of Privilege Vulnerability CVE-2024-381999.8Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability CVE-2024-382010.0The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to SQL Injection via the 'i CVE-2024-382006.5Microsoft Office Spoofing Vulnerability CVE-2024-382017.0Azure Stack Hub Elevation of Privilege Vulnerability CVE-2024-382027.3Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with CVE-2024-382035.5Windows Package Library Manager Information Disclosure Vulnerability CVE-2024-382046.5Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.CVE-2024-382066.5An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information CVE-2024-382076.3Microsoft Edge (HTML-based) Memory Corruption Vulnerability CVE-2024-382086.1Microsoft Edge for Android Spoofing Vulnerability CVE-2024-382097.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2024-38197: Medium severity, CVSS 6.5 | Vulnix