Nov 2026: Microsoft Teams for Android Spoofing Vulnerability
CVE-2026-122979 Published on November 10, 2026

Microsoft Teams for Android Spoofing Vulnerability
Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

Technical Impact:

TOTAL

Weakness Type

What is a Code Injection Vulnerability?

The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

CVE-2026-122979 has been classified to as a Code Injection vulnerability or weakness.

Products Associated with CVE-2026-122979

Want to know whenever a new CVE is published for Microsoft Teams? stack.watch will email you.

Microsoft Teams

Affected Versions

Microsoft Teams for Android: