Summary
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited. Customer action: Required.
Details
According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), but lead to no loss of integrity (I:N) or availability (A:N). What does that mean for this vulnerability?
The Confidentiality is set to High because an attacker who successfully exploits this vulnerability could access tokens beyond a user’s typical privilege.
The exploit results in token disclosure, however it does not affect the Integrity and Availability of the system. Thus, both of these are set as None.
Security updates
1416/1.0.0.2026202302 — https://play.google.com/store/apps/details?id=com.microsoft.teams
Vulnerabilities 1
-
High 7.5
Microsoft Teams for Android Spoofing Vulnerability
Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-69901 Microsoft Teams for Android Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69901
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss