Overview
What is CVE-2026-65767?
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
Vulnerability intelligence
CVE-2026-65767 and is rated High severity with a CVSS score of 7.6. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.