Microsoft Teams vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Teams: 6 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:teams

CVE-2026-42835 High · 8.1 CWE-74 Jun 9, 2026

Microsoft Teams for Android Information Disclosure Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

CVE-2026-32185 Medium · 5.5 CWE-552 May 12, 2026

Microsoft Teams Spoofing Vulnerability

Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.

CVE-2026-33823 Medium · 6.5 CWE-285 May 7, 2026

Microsoft Team Events Portal Information Disclosure Vulnerability

Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.

CVE-2026-26133 High · 7.1 CWE-77 Mar 16, 2026

M365 Copilot Information Disclosure Vulnerability

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-21535 High · 7.5 CWE-284 Feb 19, 2026

Microsoft Teams Information Disclosure Vulnerability

Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network.

CVE-2023-4863 High · 8.8 KEV High · 62 Public exploit CWE-787 Sep 12, 2023

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)