Microsoft Authenticator

Search everything

Mentions · 7d0
Mentions · 30d5
All mentions7
First seenSep 9, 2026
Last mentioned13d ago

Timeline

7 articles · newest first

ThreatsDay: Fortinet fixes, PHP2Shell scans, Authenticator token flaw

Fortinet is withholding flaw details until November 10 while Hudson Rock reports 40,573 exposed FortiGate secrets.

The Hacker NewsOct 29, 19:11 UTC · 13d agoExploit / PoCCVE-2026-109618 CVE-2026-109619 CVE-2026-800976

Authenticator for Android flaw let apps steal work tokens (CVE-2026-80097)

Fixed in version 6.2606.4246; Microsoft says it was not used in attacks and rates exploitation less likely.

The Hacker NewsOct 27, 12:09 UTC · 15d agoVulnerabilityCVE-2026-800971 · 1 read

Microsoft Authenticator Android flaw let apps steal work tokens

Versions before 6.2606.4246 are affected; Microsoft rated CVE-2026-80097 at CVSS 8.6 and shipped a fix on September 8, 2026.

Help Net SecurityOct 27, 06:14 UTC · 15d agoVulnerabilityCVE-2026-800971

Android Microsoft Authenticator flaw let apps steal account tokens

CVE-2026-80097, scored 8.6, affects builds before 6.2606.4246; a zero-permission app could impersonate Microsoft apps.

GBHackersOct 26, 07:13 UTC · 16d agoVulnerabilityCVE-2026-800971

Android Authenticator flaw let apps steal work tokens

An installed app with no permissions could impersonate Teams and obtain Graph tokens; fixed in 6.2606.4246.

Cyber Security NewsOct 26, 06:33 UTC · 16d agoVulnerabilityCVE-2026-800971

Microsoft Password Reset Portal Could Reveal Users and MFA Protection Details

Microsoft Entra ID’s public password-reset portal can reveal valid accounts and registered MFA methods to unauthenticated users.

Cyber Security NewsSep 25, 09:53 UTC · Sep 25, 2026Vulnerability1 · 1 read

Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

Microsoft's record September 2026 Patch Tuesday fixes 974 CVEs, including two exploited Windows privilege-escalation zero-days and 20 wormable bugs.

Security AffairsSep 9, 07:03 UTC · Sep 9, 2026VulnerabilityExploitedCVE-2026-85880 CVE-2026-81963 CVE-2026-55007+34 · 1 read

Related CVEs

by mentions

CVE-2026-80097<1%8.6
Improper Authentication in Microsoft Authenticator Enables Local Privilege Escalation
published Sep 8, 2026Microsoft Authenticator
CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 21d agophpKEVPoC ×18
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 21d agophpKEVPoC ×25
CVE-2026-85880<1%7.8
Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
published Sep 8, 2026Microsoft Windows 10KEV
CVE-2026-81963<1%7.8
Local Privilege Escalation via Link Following in Windows Update Stack
published Sep 8, 2026Microsoft Windows 11KEVPoC
CVE-2026-697301%9.8
Use-After-Free RCE in Windows DNS Server
published Sep 8, 2026Microsoft Windows DNS Server role (Windows Server)
CVE-2026-695251%9.8
Use-After-Free RCE in Windows Remote Desktop Services
published Sep 8, 2026Microsoft Windows Remote Desktop Services
CVE-2026-69380<1%8.1
Missing Authorization Flaw in Microsoft Exchange Server Enables Privilege Escalation
published Sep 8, 2026Microsoft Exchange Server (on-premises)
CVE-2026-55007<1%8.1
Double Free Enables Unauthenticated RCE in Microsoft Exchange Server
published Sep 8, 2026Microsoft Exchange Server (on-premises)

Appears with

Microsoftvendor · 7
Enclaveorganization · 4
WordPressproduct · 1
SQL Serverproduct · 1
Infobloxorganization · 1
ResetSpyproduct · 1
Zero Day Initiativeorganization · 1
Bank of Americaorganization · 1
FortiManagerproduct · 1
Windowsproduct · 1
Cequenceorganization · 1
Microsoftorganization · 1
Googlevendor · 1
Hudson Rockorganization · 1
Androidproduct · 1
Microsoft Entra IDproduct · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned 13d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.