Microsoft Teams vulnerabilities and fixes

CVEs that mention Microsoft Teams, ranked by priority. 6 tracked.

Microsoft Teams has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-08-11. Highest priority: CVE-2026-65667 (score 62/100).

• CVE-2026-65667 CRITICAL 10.0 MITIGATE Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-62896 CRITICAL 9.6 MITIGATE Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
• CVE-2026-65768 HIGH 8.8 UPGRADE Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android
• CVE-2026-65767 HIGH 8.8 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for An
• CVE-2026-62918 HIGH 7.5 MITIGATE Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform
• CVE-2026-65769 MEDIUM 6.5 UPGRADE Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized at

FAQ

How do I fix Microsoft Teams vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Microsoft Teams being exploited right now?

None of the tracked Microsoft Teams CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Microsoft Teams CVE should I patch first?

CVE-2026-65667 currently ranks highest (62/100): Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network..

← Back to latest CVEs