CVE-2026-69559
MediumCVSS 5.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Risk Assessment
The attack can lead to leakage of sensitive information transmitted via Teams, compromising communication privacy.
Recommendation
Update the Microsoft Teams app on Android to the latest version and educate users about risks.
Other vulnerabilities in Microsoft Teams for Android
See all- CVE-2026-65768High
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.
- CVE-2026-65767High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
- CVE-2026-42835High
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Original NVD description (English source)
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS