Improper Authentication in Microsoft Authenticator by Microsoft
CVE-2026-80097

8.6HIGH

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
8 September 2026

What is CVE-2026-80097?

An improper authentication vulnerability in Microsoft Authenticator may allow an attacker to elevate their privileges locally. This flaw poses a significant risk as it could enable unauthorized users to gain elevated access rights, potentially compromising sensitive user information and system integrity. Organizations using Microsoft Authenticator should review their security measures and apply relevant patches as outlined in Microsoft's advisory.

Affected Version(s)

Microsoft Authenticator for Android 6.0.0 < 6.2606.4246

References

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.