CVE-2026-21535

CWE-284 ā€” Improper Access Control4 documents4 sources
Severity
7.5HIGH
EPSS
0.1%
top 75.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Microsoft Teams
Timeline
PublishedFeb 19
Latest updateFeb 20

Description

Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NExploitability: 3.9 | Impact: 4.2

Affected Packages1 packages

šŸ”“Vulnerability Details

2
GHSA
GHSA-rx38-cw65-cmwp: Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a networkā†—2026-02-20
ā–¶
CVEList
Microsoft Teams Information Disclosure Vulnerabilityā†—2026-02-19
ā–¶

šŸ“‹Vendor Advisories

1
Microsoft
Microsoft Teams Information Disclosure Vulnerabilityā†—2026-02-10
ā–¶
CVE-2026-21535 (HIGH CVSS 7.5) | Improper access control in Microsof | cvebase.io