Microsoft Authenticator Flaw Let Zero-Permission Android Apps Steal Work Account Tokens
RedSide Security October 26, 2026 Cybersecurity 3 views
A high-severity broker flaw in Microsoft Authenticator for Android, CVE-2026-80097, let malicious apps with no permissions steal work account access tokens. Microsoft has patched the issue.
identity security
mobile security
Microsoft Authenticator
Android
CVE-2026-80097
access tokens
elevation of privilege
Continue reading: Microsoft Authenticator Flaw Let Zero-Permission A…
