CVE-2026-80097

Microsoft · Published September 8, 2026

8.6

CVSS v3.1

HIGH

Patch availableGet patch

Description

Microsoft Authenticator Elevation of Privilege Vulnerability. Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

Affected Products

Microsoft Authenticator for Android

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C