Loading story…
Microsoft disclosed and patched CVE-2026-32185, an Important spoofing vulnerability in Microsoft Teams for Android caused by improper access to files or directories, mapped to CWE-552. The flaw could allow an unauthorized local attacker to spoof trusted elements in the app and potentially trick users into accepting malicious content or communications. Microsoft assigned the issue a CVSS 3.1 score of 5.5 and said exploitation requires local access and user interaction, but could still have a high confidentiality impact.
Microsoft said the vulnerability was not publicly disclosed, not exploited in the wild, and had no public proof-of-concept at the time of publication, with exploitation assessed as less likely. The company released a fix through the Google Play Store and advised users to update Microsoft Teams for Android to version 1.0.0.2026092103 or later. Microsoft credited Ofek Levin of Enclave with responsibly reporting the issue.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On 2026-05-21, Microsoft announced that the security update for Microsoft Teams for Android was available and advised customers to install it. The fix was distributed via Google Play Store, with affected users told to update to build 1.0.0.2026092103 or later.
On 2026-05-12, Microsoft published an advisory for CVE-2026-32185, rating it Important with a CVSS 3.1 score of 5.5. Microsoft said the flaw enabled local spoofing in Teams for Android and that it had not been publicly disclosed or exploited in the wild at that time.
Microsoft credited security researcher Ofek Levin of Enclave with responsibly disclosing CVE-2026-32185, a spoofing flaw in Microsoft Teams for Android caused by improper access to files or directories.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft disclosed **CVE-2026-42835**, an Important-severity information disclosure vulnerability in **Microsoft Teams for Android** that could allow a remote, authenticated low-privileged attacker to access small portions of heap memory without user interaction. The flaw, classified as **CWE-74** for improper neutralization of special elements in output used by a downstream component, carries a **CVSS 3.1 score of 8.1** and may expose sensitive runtime data including authentication tokens, session information, or cached credentials. Microsoft said the vulnerability was responsibly reported by **Ofek Levin of Enclave** through its coordinated disclosure program and has released a security update through the **Google Play Store**. The company stated that exploitation is considered less likely and that it had seen no public disclosure or evidence of active exploitation at the time of publication, but organizations using Teams for sensitive internal communications were urged to update affected Android clients promptly.
Jun 29, 2026
Microsoft has disclosed and patched multiple **spoofing vulnerabilities** affecting **Microsoft Edge for Android**, including `CVE-2026-35429`, `CVE-2026-42891`, `CVE-2026-0391`, `CVE-2025-47967`, and the earlier `CVE-2024-21387`. The issues are described as **user interface misrepresentation** flaws that could let an unauthenticated attacker present misleading content over a network, potentially tricking users who visit attacker-controlled pages. The repeated classification points to browser UI spoofing risks in the Android version of Edge rather than code execution or privilege escalation. For `CVE-2026-35429`, Microsoft said the flaw was rated **Moderate** with a **CVSS v3.1 score of 4.3**, required **user interaction**, and had **low attack complexity** with **no privileges required**. Microsoft also stated the vulnerability was **not publicly disclosed** and **not exploited** at the time of publication, and released a fix in **Microsoft Edge for Android version `148.0.3967.55`**. The additional CVE entries indicate a broader pattern of Edge for Android spoofing issues being tracked and remediated through Microsoft’s Security Update Guide.
Jun 29, 2026
Researchers at Check Point disclosed four critical vulnerabilities in Microsoft Teams that allowed attackers to impersonate executives, alter chat history, and forge notifications or caller identities without detection. These flaws, now patched, enabled manipulation of message content without the usual 'Edited' label, spoofing of alerts to appear from trusted colleagues, and renaming of chats to misrepresent participants. The vulnerabilities exploited Teams' messaging architecture, including the reuse of unique message identifiers and manipulation of hidden conversation parameters, fundamentally undermining the trust in digital communications for over 320 million monthly users. Microsoft was notified of the issues in March 2024 and addressed them through a series of patches, with the final fix released in October 2025. The vulnerabilities, tracked as CVE-2024-38197 among others, affected both internal users and external guests, posing significant risks of social engineering, data theft, and unauthorized actions. Attackers could trick users into clicking malicious links or sharing sensitive information by making messages and calls appear to originate from high-profile executives or trusted sources, highlighting the importance of prompt patching and ongoing vigilance in collaboration platforms.
Jun 29, 2026