9.6
Critical
CVE-2026-41615 Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to…
Description
Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Authenticator for Android 6.0 | 6.0.0 → < 6.2605.2973 | 6.2605.2973 |
| Microsoft Authenticator for IOS 6.0 | 6.0.0 → < 6.8.47 | 6.8.47 |