Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens

A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft apps and steal authentication tokens for a victim’s signed-in work account. This vulnerability is tracked as CVE-2026-80097 and affects Microsoft Authenticator versions earlier than 6.2606.4246. Microsoft has since issued a patch. Microsoft Authenticator Flaw Security […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform