CVE-2026-65812: Insertion of Sensitive Information Into Sent Data

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65768: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...

CVE-2026-65767: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...

CVE-2026-42835: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2024-21448: Improper Input Validation

Microsoft Teams for Android Information Disclosure Vulnerability...

CVE-2024-21374: Improper Input Validation

Microsoft Teams for Android Information Disclosure Vulnerability...

PT-2021-6652

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description The issue is due to insufficient input validation, which can be exploited by a remote attacker to cause the application to crash. Recommendations At the moment, there is n...

PT-2021-6655

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description The issue is related to the inclusion of a web feature from an untrusted source in Microsoft Teams for Android. Exploitation of this issue may allow a remote attacker to...