A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft apps and steal authentication tokens for a victim’s signed-in work account. This vulnerability is tracked as CVE-2026-80097 and affects Microsoft Authenticator versions earlier than 6.2606.4246. Microsoft has since issued a patch. Microsoft Authenticator Flaw Security […] The post Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
First seen on gbhackers.com
Jump to article: gbhackers.com/microsoft-authenticator-flaw/
