Microsoft Patches Authenticator Android Flaw Enabling Token Theft

Microsoft fixed high-severity vulnerability CVE-2026-80097 in its Authenticator app for Android, which allowed malicious apps to impersonate Microsoft apps and obtain delegated account tokens.

2newsrooms

2articles

10 hoursrunning

Oct 26first seen

Ask Scout

Scout answers questions about this story using only the coverage below.

Coverage over time

Articles

Oct 27, 8:20 AM	techradar.com	Critical Microsoft Authenticator flaw let malicious Android apps steal access to your precious accounts
Oct 26, 10:30 PM	techmeme.com	Microsoft patches a severe flaw in its Android Authenticator app that could let untrusted apps impersonate Microsoft apps and obtain delegated account tokens (Abinaya/Cyber Security News)