Authenticator for Android flaw let apps steal work tokens (CVE-2026-80097)
Fixed in version 6.2606.4246; Microsoft says it was not used in attacks and rates exploitation less likely.
68
- Mentions · 7d4
- Mentions · 30d4
- All mentions5
- First seenSep 9, 2026
- Last mentioned3d ago
Timeline
5 articles · newest firstMicrosoft Authenticator Android flaw let apps steal work tokens
Versions before 6.2606.4246 are affected; Microsoft rated CVE-2026-80097 at CVSS 8.6 and shipped a fix on September 8, 2026.
72
Android Microsoft Authenticator flaw let apps steal account tokens
CVE-2026-80097, scored 8.6, affects builds before 6.2606.4246; a zero-permission app could impersonate Microsoft apps.
67
Android Authenticator flaw let apps steal work tokens
An installed app with no permissions could impersonate Teams and obtain Graph tokens; fixed in 6.2606.4246.
66
Microsoft Teams for Android Vulnerability Exposes Sensitive Information
Microsoft patched CVE-2026-65812 in Teams for Android, an information-disclosure flaw that can leak credentials under specific conditions.
30
Related CVEs
by mentions- CVE-2026-80097<1%8.6Improper Authentication in Microsoft Authenticator Enables Local Privilege Escalation
- CVE-2026-65812<1%6.8Sensitive Information Disclosure in Microsoft Teams for Android
Appears with
- Microsoftvendor · 5
- Microsoft Authenticatorproduct · 4
- Microsoft Graphproduct · 1
- Microsoft Teamsproduct · 1
- Microsoft Teams for Androidproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.