Microsoft Teams Vulnerability Allows Hackers to Perform Spoofing Attacks

A CVE-2026-32185 vulnerability in Microsoft Teams for Android (CVSS 3.1 base score 5.5) allows an attacker with local access and required user interaction to exploit exposed files and perform spoofing that compromises confidentiality. Microsoft rated exploitability as "Less Likely," reported no active exploitation or public exploit code, and released a patch (build 1.0.0.2026092103 or later) on May 12, 2026; users are advised to update via Google Play.