Microsoft Teams For Android vulnerabilities
14 vulnerabilities
Known vulnerabilities in Microsoft Teams For Android, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-53783microsoftdynamics_365_guides+12
EPSS score0.81%
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.CVE-2025-49731microsoftmicrosoft teams for android+3EPSS score0.48%
Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a network.CVE-2022-21965microsoftmicrosoft teams admin center+3EPSS score2.96%
Microsoft Teams Denial of Service VulnerabilityCVE-2024-21448microsoftmicrosoft teams for android+1EPSS score1.24%
Microsoft Teams for Android Information Disclosure VulnerabilityCVE-2024-21374microsoftmicrosoft teams for android+1EPSS score0.97%
Microsoft Teams for Android Information Disclosure VulnerabilityCVE-2026-65767microsoftmicrosoft teams for android+1EPSS score0.61%
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.CVE-2026-65768microsoftmicrosoft teams for android+1EPSS score0.94%
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.CVE-2026-65812microsoftmicrosoft teams for android+1EPSS score0.89%
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.CVE-2026-26133microsoft365_copilot+29EPSS score0.56%
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.CVE-2026-42835microsoftmicrosoft teams for android+1EPSS score1.24%
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.CVE-2026-69559microsoftmicrosoft teams for android+1EPSS score0.32%
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.CVE-2026-32185microsoftmicrosoft teams for android+1EPSS score0.55%
Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.CVE-2023-29328microsoftmicrosoft teams for android+4EPSS score2.15%
Microsoft Teams Remote Code Execution VulnerabilityCVE-2023-29330microsoftmicrosoft teams for android+4EPSS score2.00%
Microsoft Teams Remote Code Execution Vulnerability