CVEFinder.io

CVE-2026-80097

⚠️ high
Summary

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

CVSS Score
8.6
High
EPSS Score
0.4
Exploit Probability
Published Date
2026-09-08
First Seen: 2026-09-09
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 80.2% of all 365,890 vulnerabilities in our database.

#72,494
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Sep 9, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-09-24
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-287

📦 Affected Products 1

Vendor Product Status Affected Versions
microsoft authenticator Affected
< 6.2606.4246

🔗 References 1

https://msrc.microsoft.com/update-guide/vulnerabilit...
Vendor Advisory

🔗 Related CVEs 3

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-41615 ⛔ critical 9.6 0.1 Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to... 2026-05-14
CVE-2026-26123 🔶 medium 5.5 0.0 Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally. 2026-03-10
CVE-2024-21390 ⚠️ high 7.1 1.1 Microsoft Authenticator Elevation of Privilege Vulnerability 2024-03-12
These CVEs affect the same products