Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
References
| Link | Resource |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42835 | Vendor Advisory |
Configurations
History
12 Jun 2026, 19:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:* | |
| First Time |
Microsoft teams
Microsoft |
|
| References | () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42835 - Vendor Advisory |
09 Jun 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-09 17:17
Updated : 2026-06-12 19:28
NVD link : CVE-2026-42835
Mitre link : CVE-2026-42835
CVE.ORG link : CVE-2026-42835
JSON object : View
Products Affected
microsoft
- teams
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')