MicrosoftCVE-2026-62918

Microsoft Teams: spoofing

High7.5CVE-2026-62918 · Published Aug 7, 2026

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Teams Product	all versions	No fix yet

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-347

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Aug 7	Microsoft SharePoint Online: cross-site scripting Critical9.6Aug 7 CVE-2026-70332No fix yet	Critical9.6	No fix yet
Aug 7	Microsoft Azure Confidential Ledger: remote code execution Critical9.1Aug 7 CVE-2026-68823No fix yet	Critical9.1	No fix yet
Aug 7	Microsoft Teams: missing authorization Critical10.0Aug 7 CVE-2026-65667No fix yet	Critical10.0	No fix yet
Aug 7	Microsoft Purview eDiscovery: improper access control High8.8Aug 7 CVE-2026-65668No fix yet	High8.8	No fix yet
Aug 7	Microsoft 365 Admin Center: privilege escalation Critical9.8Aug 7 CVE-2026-62873No fix yet	Critical9.8	No fix yet
Aug 7	Microsoft Teams: improper authentication Critical9.6Aug 7 CVE-2026-62896No fix yet	Critical9.6	No fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.