CVE-2026-65767

HighCVSS 8.8

Published: 11/08/2026(UTC)Updated: 16/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

37th percentile - higher than 37% of all known CVEs

Summary

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.

Risk Assessment

An authorized attacker could exploit the vulnerability to spoof content, potentially leading to fraud or data theft.

Recommendation

Update Microsoft Teams for Android to the latest version containing the fix.

Original NVD description (English source)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.