Improper Authentication in Microsoft Authenticator by Microsoft
CVE-2026-80097
8.6HIGH
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 8 September 2026
What is CVE-2026-80097?
An improper authentication vulnerability in Microsoft Authenticator may allow an attacker to elevate their privileges locally. This flaw poses a significant risk as it could enable unauthorized users to gain elevated access rights, potentially compromising sensitive user information and system integrity. Organizations using Microsoft Authenticator should review their security measures and apply relevant patches as outlined in Microsoft's advisory.
Affected Version(s)
Microsoft Authenticator for Android 6.0.0 < 6.2606.4246