CVE-2026-80097highCWE-287

CVE-2026-80097: high-severity vulnerability in Microsoft Authenticator for Android

Microsoft Authenticator Elevation of Privilege Vulnerability

Published · Updated

Follow this CVE+ Monitor Microsoft Authenticator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 8.6epss 0.5%
from disclosure to weapon49 days
Published on NVDSep 8
1st PoC+49d
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft Authenticator for Android
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Authenticator for Android

In the same product, most dangerous first.

CVE-2026-26123MEDIUMMicrosoft Authenticator Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-41615CRITICALMicrosoft Authenticator Information Disclosure VulnerabilityEPSS 0.6%