5.5
Medium
CVE-2026-26123 Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally
Description
Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Authenticator for Android 6.0 | 6.0.0 → < 6.2511.7533 | 6.2511.7533 |
| Microsoft Authenticator for IOS 6.0 | 6.0.0 → < 6.8.40 | 6.8.40 |