Product by Microsoft
Microsoft Teams for Android
31 known vulnerabilities in Microsoft Teams for Android (Microsoft), 1 of them actively exploited (CISA KEV).
Key figures
31
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability In CISA KEV | 8.8 | |
| Medium | CVE-2024-38197 | Microsoft Teams for iOS Spoofing Vulnerability | 6.5 | |
| High | CVE-2019-5922 | Microsoft Teams for Android: Privilege Escalation | 7.8 | |
| Critical | CVE-2026-65768 | Microsoft Teams Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-29328 | Microsoft Teams Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-29330 | Microsoft Teams Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-21965 | Microsoft Teams Denial of Service Vulnerability | 7.5 | |
| Critical | CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | 10.0 | |
| High | CVE-2026-42835 | Microsoft Teams for Android Information Disclosure Vulnerability | 8.1 | |
| Critical | CVE-2026-62896 | Microsoft Teams Elevation of Privilege Vulnerability | 9.6 | |
| Critical | CVE-2026-33823 | Microsoft Team Events Portal Information Disclosure Vulnerability | 9.6 | |
| Medium | CVE-2021-24114 | Microsoft Teams iOS Information Disclosure Vulnerability | 5.7 | |
| High | CVE-2020-17091 | Microsoft Teams Remote Code Execution Vulnerability | 7.8 | |
| Medium | CVE-2026-65812 | Microsoft Teams for Android Information Disclosure Vulnerability | 6.8 | |
| High | CVE-2026-65767 | Microsoft Teams for Android Spoofing Vulnerability | 8.8 | |
| High | CVE-2026-65769 | Microsoft Teams iOS Information Disclosure Vulnerability | 6.5 | |
| Medium | CVE-2020-10146 | Microsoft Teams displayName stored cross-site scripting vulnerability | 5.7 | |
| Medium | CVE-2023-24881 | Microsoft Teams Information Disclosure Vulnerability | 6.5 | |
| High | CVE-2026-21535 | Microsoft Teams Information Disclosure Vulnerability | 8.2 | |
| High | CVE-2026-62918 | Microsoft Teams Spoofing Vulnerability | 7.5 | |
| High | CVE-2025-53783 | Microsoft Teams Remote Code Execution Vulnerability | 7.5 | |
| Critical | CVE-2024-41138 | Microsoft Teams (work or school): Improper Verification of Cryptographic Signature | 7.1 | |
| Critical | CVE-2024-42004 | Microsoft Teams (work or school): Improper Verification of Cryptographic Signature | 7.1 | |
| Critical | CVE-2024-41145 | Microsoft Teams (work or school): Improper Verification of Cryptographic Signature | 7.1 | |
| High | CVE-2026-26133 | M365 Copilot Information Disclosure Vulnerability | 7.1 |
News
- NCSC-2026-0286 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0286 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0182 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,
- SSA-268517 V1.0: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Prosiemens-productcert