CVE-2026-32185

Full vulnerability record from the local CVENow database.

Description

Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.

Severity

MEDIUM

CVSS score

5.5 (v3.1)

Vulnerability status

Analyzed

Source identifier

[email protected]

Published

2026-05-12 18:16:59.430000

Last modified

2026-10-26 18:10:00.173000

View original CVE JSON

{
  "id": "CVE-2026-32185",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-12T18:16:59.430",
  "lastModified": "2026-10-26T18:10:00.173",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally."
    },
    {
      "lang": "es",
      "value": "Archivos o directorios accesibles a terceros externos en Microsoft Teams permiten a un atacante no autorizado realizar suplantación de identidad localmente."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Teams for Android",
          "versions": [
            {
              "version": "1.0.0",
              "lessThan": "1.0.0.2026092402",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-13T03:57:33.897127Z",
          "id": "CVE-2026-32185",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-552"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:*",
              "versionEndExcluding": "1.0.0.2026092103",
              "matchCriteriaId": "5EB16632-1C23-40E3-BFDC-DA81A5718100"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32185",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}