CVE-2026-80097
- CVSS
- —
- EPSS
- 0.004 (38.1th percentile)
- CISA KEV
- Not listed
- Exploitation
- No report
- Public exploits
- None seen
- State
- Unknown
Coverage
The Hacker NewsSpecialist. Specialist publisher: established trade press, or expert analysis with a track record
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android…
Techmeme (feed as signal)Specialist. Specialist publisher: established trade press, or expert analysis with a track record
Microsoft patches a severe flaw in its Android Authenticator app that could let untrusted apps impersonate Microsoft apps and obtain delegated account tokens (Abinaya/Cyber Security News)
Abinaya / Cyber Security News: Microsoft patches a severe flaw in its Android Authenticator app that could let untrusted apps impersonate Microsoft apps and obtain delegated account tokens — Microsoft patched high-severity flaw CVE-2026-80097 (CVSS 8.6) in Authenticator for Android, allowing…
Microsoft MSRCAuthoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards
CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability
Corrected fix build number. Informational change only.
What we observed
No signals recorded