CVE-2026-80097: Microsoft Authenticator

High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

Affected products

• Microsoft Authenticator: before 6.2606.4246 (fixed in 6.2606.4246)

Published 2026-09-08. Last modified 2026-09-24.