Microsoft Teams for Android Vulnerability Exposes Sensitive Information
Microsoft patched CVE-2026-65812 in Teams for Android, an information-disclosure flaw that can leak credentials under specific conditions.
Microsoft fixed CVE-2026-65812, rated Important, which can insert sensitive information such as credentials into data sent by Microsoft Teams for Android (build 1416/1.0.0.2026133602). Exploitation is remote and low-complexity, requires low privileges plus user interaction, and impact is limited to high confidentiality impact. Microsoft says exploitation is less likely, with no public PoC, disclosure, or in-the-wild exploitation; the fix ships via the Teams app update on Google Play. Ofek Levin of Enclave reported the flaw through coordinated vulnerability disclosure.
- CWE-201 weakness: sensitive information inserted into sent data, potentially exposing user credentials
- Requires user interaction; no known exploitation, PoC, or public disclosure
- Integrity and availability are unaffected; risk is follow-on attacks using leaked credentials
- Administrators should verify mobile update policies and review sign-in logs for suspicious access
Vulnerabilities mentionedAll →
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-65812 | Sensitive Information Disclosure in Microsoft Teams for Android CVE-2026-65812 is an information disclosure flaw (CWE-201) in Microsoft Teams for Android in which the client inserts sensitive information into data it sends over the network. Per the CVSS vector, an authorized (authenticated, low-privilege) attacker can trigger the condition, user interaction is required, and the changed-scope metric indicates the sensitive data crosses a security boundary to another trust zone. A successful exploit discloses confidential information, with no impact on data integrity or availability. Only users running the Android Teams client are named as affected; other Teams platforms are not specified in this data. No public proof-of-concept or in-the-wild exploitation is known, and EPSS estimates only about a 0.5% chance of exploitation within 30 days. Do: Update Microsoft Teams for Android to the latest build distributed via Google Play (or via Intune/MDM-managed app updates) and verify installed client versions on managed devices. Because exploitation requires an authenticated attacker and user interaction, prioritize patching users who handle highly sensitive data. Monitor Microsoft's advisory for the specific fixed version, which is not stated in this data. | 6.8 | <1% |
| masstens of millions of Android users (Teams has hundreds of millions of monthly active users overall and a very large Google Play install base for the Android… |
Full article438 words · extracted from cybersecuritynews.com · click to collapse
Microsoft has released a security update for CVE-2026-65812, a vulnerability in Microsoft Teams for Android that could allow an authorized attacker to disclose sensitive information, including user credentials.
Microsoft published the flaw on September 8, 2026, and rates it as Important. The issue affects Microsoft Teams for Android and is classified as an information disclosure vulnerability.
Microsoft said the weakness could allow sensitive information to be inserted into sent data, creating a risk that credentials may be exposed over a network under specific conditions.
This indicates that the attack can be performed remotely over a network, requires low attack complexity, and needs an attacker to have low-level privileges. However, successful exploitation also requires user interaction.
Microsoft Teams for Android Vulnerability
Microsoft did not specify the exact action required from a victim. This suggests an attacker may need to persuade a Teams user to interact with crafted content, a message, a shared resource, or another attacker-controlled element.
The vulnerability is linked to CWE-201, known as Insertion of Sensitive Information Into Sent Data. This class of weakness occurs when an application unintentionally includes confidential data in transmitted content.
In the Teams for Android issue, Microsoft confirmed that credentials could potentially be disclosed if the flaw is exploited. The security impact is limited to confidentiality. Microsoft assigned a High confidentiality impact, while integrity and availability impacts are rated None.
This means the vulnerability is not expected to let attackers alter Teams data, execute code, disrupt the application, or deny access to services. Its primary risk is exposing authentication-related information that could enable follow-on attacks.
Microsoft says exploitation is less likely, with no known public disclosure or in-the-wild exploitation, and no confirmed public proof-of-concept exploit. The affected Teams for Android build is 1416/1.0.0.2026133602.
Microsoft has provided an official fix through the Microsoft Teams app update channel on Google Play. Organizations should ensure that managed Android devices receive the latest Teams update as soon as possible.
Administrators should verify mobile application update policies, confirm that users are running the patched Teams version, and monitor for unusual authentication events.
Because credentials may be exposed, security teams should also review sign-in logs for suspicious access attempts, especially for accounts that use Teams on Android devices.
Ofek Levin of Enclave reported the vulnerability through coordinated vulnerability disclosure. Microsoft credited the researcher for helping identify and address the issue before confirmed exploitation was reported.
Learn 7 Metric-Gated AI SOC Deployment Phases – Download Free AI SOC Deployment Playbook 2026.
Abinayahttps://cybersecuritynews.com/
Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.
Text extracted automatically; images, tables and formatting may be missing. Original: https://cybersecuritynews.com/microsoft-teams-android-vulnerability/