CVE-2026-65768

HighCVSS 8.8

Published: 11/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

47th percentile - higher than 47% of all known CVEs

Summary

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.

Risk Assessment

An unauthorized attacker could remotely exploit the vulnerability to execute code on the device, potentially leading to control over the app or data.

Recommendation

Update Microsoft Teams for Android to the latest version containing the fix.

Original NVD description (English source)

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.