high8.1
CVE-2026-42835
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker…
Impact
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Teams | before 1.0.76.2026111302 |