8.6
High
CVE-2026-80097 Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally
Description
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Authenticator for Android 6.0 | 6.0.0 → < 6.2606.4246 | 6.2606.4246 |