Known vulnerabilities in Microsoft Teams for Android

Vendor: Microsoft
Software: Microsoft Teams for Android
Software CPE: cpe:2.3:a:microsoft:microsoft_teams_for_android:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Teams for Android Microsoft Teams for Android is affected by 13 known vulnerabilities: 4 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148452 - Insertion of Sensitive Information Into Sent Data
CVE-2026-65812		 CWE-201 Medium
No
No
 1416/1.0.0.2026133602 09.09.2026 SB2026090941
#VU148451 - Origin Validation Error
CVE-2026-69559		 CWE-346 Medium
No
No
 1416/1.0.0.2026142702 09.09.2026 SB2026090940
#VU141455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-65767		 CWE-79 Low
No
No
 1.0.76.202611302 11.08.2026 SB2026081140
#VU141453 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-65768		 CWE-22 High
No
No
 1.0.0.2026133602 11.08.2026 SB2026081138
#VU134160 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-42835		 CWE-74 Medium
No
No
 1.0.76.2026111302 09.06.2026 SB2026060975
#VU131318 - Files or Directories Accessible to External Parties
CVE-2026-32185		 CWE-552 Medium
No
No
 1.0.0.2026092103 13.05.2026 SB2026051352
#VU114040 - Heap-based Buffer Overflow
CVE-2025-53783		 CWE-122 High
No
No
 - 13.08.2025 SB2025081396
#VU112615 - Permissions, Privileges, and Access Controls
CVE-2025-49731		 CWE-264 Low
No
No
 1.0.0.2025112902 1.0.0.2025112902 09.07.2025 SB2025070957
#VU87455 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21448		 CWE-200 Medium
No
No
 - 12.03.2024 SB20240312341
#VU86431 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21374		 CWE-200 Medium
No
No
 - 13.02.2024 SB2024021355
#VU79191 - Improper input validation
CVE-2023-29328		 CWE-20 High
No
No
 - 08.08.2023 SB2023080885
#VU79186 - Improper input validation
CVE-2023-29330		 CWE-20 High
No
No
 - 08.08.2023 SB2023080885
#VU60442 - Improper input validation
CVE-2022-21965		 CWE-20 Medium
No
No
 - 08.02.2022 SB2022020851