- 40/2026
- High
Microsoft has released a security update to address a vulnerability that affects Microsoft Teams.
The addressed vulnerability could allow the remote unauthorized attacker to obtain sensitive information from the affected system.
Microsoft Teams Information Disclosure Vulnerability (CVE-2026-21535):
- CVSS: 8.2
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Obtain Information
Vulnerabilities
CVE-2026-21535
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.