cve-2026-80097

Blog All categories All authors All tags
Preview image for a blog post

Critical Flaw in Microsoft Authenticator for Android: Unsanctioned Apps Exploited Work Account Tokens (CVE-2026-80097)

Microsoft Authenticator vulnerability (CVE-2026-80097) allowed zero-permission Android apps to steal work account tokens, fixed in version 6.2606.4246.