CVE-2026-65812: Insertion of Sensitive Information Into Sent Data

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65768: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...

CVE-2026-65767: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...

CVE-2026-42835: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of special elements in output used by a downstream component 'injection' in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

Microsoft Teams security vulnerabilities

Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting the vulnerability could execute code. The following products and versions are affected:Teams for D365 Remote Assis...

CVE-2024-21448: Improper Input Validation

Microsoft Teams for Android Information Disclosure Vulnerability...

CVE-2024-21374: Improper Input Validation

Microsoft Teams for Android Information Disclosure Vulnerability...

PT-2021-6655

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description The issue is related to the inclusion of a web feature from an untrusted source in Microsoft Teams for Android. Exploitation of this issue may allow a remote attacker to...

PT-2021-6652

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android affected versions not specified Description The issue is due to insufficient input validation, which can be exploited by a remote attacker to cause the application to crash. Recommendations At the moment, there is n...