oskarsve/ms-teams-rce resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1104 stars · 73 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A security research writeup documenting zero-click, wormable remote code execution vulnerabilities in Microsoft Teams, reported to MSRC in 2020. It details the bug chain, Microsoft's 'Important, Spoofing' rating controversy, and the disclosure timeline.

Use cases

• learn how zero-click RCE bug chains work in desktop apps
• study real-world vulnerability disclosure against Microsoft MSRC
• understand how chat message rendering can lead to code execution
• research Electron app security weaknesses
• teach examples of severity rating disputes in bug bounties

When to choose

• you want a detailed real-world RCE writeup for learning security research
• you're studying responsible disclosure and vendor rating practices
• you research messaging app attack surfaces

When to avoid

• you need a working exploit tool or scanner
• you need current vulnerabilities - these bugs were fixed in late 2020
• you need actionable defensive tooling rather than a narrative writeup

Facets

learning-resource · maturity maintenance

security penetration-testing vulnerability-scanning security developer-tools cross-platform security-research vulnerability-writeup microsoft-teams rce bug-bounty zero-click

Member repositories

For agents

markdown · JSON · MCP: product_card(name="oskarsve/ms-teams-rce")