Summary
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, successful exploitation of this vulnerability could lead to loss of confidentiality (C:H)? What does that mean for this vulnerability?
Successful exploitation of this vulnerability allows an attacker to impersonate another user and access information based on the victim user's permission levels.
Security updates
1.0.0.2026142702 — https://play.google.com/store/apps/details?id=com.microsoft.teams
Vulnerabilities 1
-
High 8.8
Microsoft Teams for Android Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
Revision history
-
#2
Corrected build number for the security update. This in an informational change only.
-
#1
Information published.
References
-
CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65767
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss