CVE-20XX-?

Microsoft Teams CVEs.

Published CVEs affecting Microsoft Teams, ranked by exploit odds.

14 CVEs · updated 2026-11-06 03:02 UTC

  1. CVE-2026-42835

    Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Teams

    8.1 HIGH 1% exploit odds Fix listed
  2. CVE-2026-65768

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.

    Disclosure OS & kernel Microsoft Teams

    8.8 HIGH 0.9% exploit odds Fix listed
  3. CVE-2026-65769

    Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.

    Disclosure Microsoft Teams

    6.5 MEDIUM 0.9% exploit odds Fix listed
  4. CVE-2026-65812

    Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Teams

    6.8 MEDIUM 0.9% exploit odds Fix listed
  5. CVE-2026-65667

    Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

    Auth & access Microsoft Teams

    10.0 CRITICAL 0.8% exploit odds Fix listed
  6. CVE-2026-33823

    Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.

    Other Microsoft Teams

    9.6 CRITICAL 0.7% exploit odds Fix listed
  7. CVE-2026-62896

    Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

    Auth & access Microsoft Teams

    9.6 CRITICAL 0.7% exploit odds Fix listed
  8. CVE-2026-21535

    Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network.

    Auth & access Microsoft Teams

    8.2 HIGH 0.7% exploit odds Fix listed
  9. CVE-2026-65767

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.

    XSS OS & kernel Microsoft Teams

    8.8 HIGH 0.6% exploit odds Fix listed
  10. CVE-2026-62918

    Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

    Crypto Microsoft Teams

    7.5 HIGH 0.5% exploit odds Fix listed
  11. CVE-2025-49731

    Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

    Microsoft Teams

    3.1 LOW 0.5% exploit odds Fix listed
  12. CVE-2026-32185

    Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.

    Other Microsoft Teams

    5.5 MEDIUM 0.5% exploit odds Fix listed
  13. CVE-2026-69559

    Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

    Other OS & kernel Microsoft Teams

    5.8 MEDIUM 0.3% exploit odds Fix listed
  14. CVE-2025-49737

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker to elevate privileges locally.

    Microsoft Teams

    7.0 HIGH 0.2% exploit odds Fix listed

All CVEs affecting Microsoft Teams that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.