{"id":"CVE-2026-122979","kind":"vulnerability","aliases":["CVE-2026-122979"],"related":[],"title":"Microsoft Teams for Android: code injection lets an attacker spoof over network","description":"Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.","summary":"Microsoft Teams for Android has a code injection flaw (CWE-94) that lets an unauthorized attacker perform spoofing over a network. The sources do not say what code runs or what data is exposed.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","microsoft-teams","other"],"not_affected_if":[],"how_to_check":"- Check the installed Microsoft Teams version on Android devices in the Play Store or device app settings","fix":null,"status":"open","published_at":"2026-11-10T19:20:37+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","triaged_at":"2026-11-10T19:34:38+00:00","updated_at":"2026-11-10T19:34:38+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T19:34:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft Teams for Android: code injection lets an attacker spoof over network","impact":"medium","summary":"Microsoft Teams for Android has a code injection flaw (CWE-94) that lets an unauthorized attacker perform spoofing over a network. The sources do not say what code runs or what data is exposed.","audience":"everyone","category":"other","nicknames":[],"who_cares":["microsoft-teams","android"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker spoofs content over the network; code injection impact unconfirmed","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-122979 for affected versions, fixed build and whether user interaction is needed.","how_to_check":"- Check the installed Microsoft Teams version on Android devices in the Play Store or device app settings\n- unknown for anything beyond that, as the sources do not say which versions are affected","plain_action":"Update Microsoft Teams on your Android phone through the Google Play Store once Microsoft publishes a fix.","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Users of Microsoft Teams on Android devices are the affected group, based on the product named in the description. The sources do not describe the exact trigger, affected versions, or configuration, so unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000709,"input_tokens":4500,"output_tokens":517,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-122979 for affected versions, fixed build and whether user interaction is needed.","search":"'-122979':15A,18A '-2026':14A,17A '-94':33B 'allow':70C 'android':4A,19B,26B,69C 'attack':9A,38B,73C 'code':5A,29B,50B,62C,63C 'control':58C 'cve':13A,16A 'cwe':32B 'data':54B 'expos':56B 'flaw':31B 'generat':60C 'improp':57C 'inject':6A,30B,64C 'let':7A,35B 'microsoft':1A,21B,23B,66C 'microsoft-team':20B 'network':12A,43B,79C 'perform':39B,75C 'run':51B 'say':48B 'sourc':45B 'spoof':10A,40B,76C 'team':2A,22B,24B,67C 'unauthor':37B,72C","nicknames":[],"mitigations":[],"who_affected":"Users of Microsoft Teams on Android devices are the affected group, based on the product named in the description. The sources do not describe the exact trigger, affected versions, or configuration, so unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Update Microsoft Teams on your Android phone through the Google Play Store once Microsoft publishes a fix.","pkeys":[],"ptokens":[],"labels":["android","high","microsoftteams","other"],"campaign_type":null,"search_a":"'-122979':15A,18A '-2026':14A,17A 'android':4A 'attack':9A 'code':5A 'cve':13A,16A 'inject':6A 'let':7A 'microsoft':1A 'network':12A 'spoof':10A 'team':2A","search_b":"'-94':33B 'android':19B,26B 'attack':38B 'code':29B,50B 'cwe':32B 'data':54B 'expos':56B 'flaw':31B 'inject':30B 'let':35B 'microsoft':21B,23B 'microsoft-team':20B 'network':43B 'perform':39B 'run':51B 'say':48B 'sourc':45B 'spoof':40B 'team':22B,24B 'unauthor':37B","search_c":"'allow':70C 'android':69C 'attack':73C 'code':62C,63C 'control':58C 'generat':60C 'improp':57C 'inject':64C 'microsoft':66C 'network':79C 'perform':75C 'spoof':76C 'team':67C 'unauthor':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:37+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122979","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122979","severity":null,"published_at":"2026-11-10T19:20:37+00:00","modified_at":"2026-11-10T19:20:37+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","fetched_at":"2026-11-10T19:25:11+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}