56 matches found
CVE-2026-26123
Summary: CVE-2026-26123 affects Microsoft Authenticator for iOS and Android. A malicious app on the same device could intercept sign-in flows by hijacking deep links/QR-based sign-ins, potentially exposing one-time codes and allowing account takeover, bypassing MFA protections. The vulnerability ...
Microsoft Authenticator Information Disclosure Vulnerability
Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally...
PT-2026-24376
Name of the Vulnerable Software and Affected Versions Microsoft Authenticator affected versions not specified Description A condition exists where an unauthorized attacker can disclose information locally. The issue relates to Cwe not being in rca categories. Recommendations At the moment, there ...
Microsoft Authenticator 安全漏洞
Microsoft Authenticator is an application for multi-factor authentication developed by Microsoft Corporation in the United States. There is a security vulnerability in Microsoft Authenticator. Attackers can exploit this vulnerability to obtain sensitive information. The following products and...
KLA90927 OSI vulnerability in Microsoft Apps
An information disclosure vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-26123 Exploitation CVE list CVE-2026-26123 high Solution Install necessary updates from t...
EUVD-2024-19101
Malicious code in bioql PyPI...
Microsoft Removes Password Management from Authenticator App Starting August 2025
Microsoft has said that it's ending support for passwords in its Authenticator app starting August 1, 2025. Microsoft's move is part of a much larger shift away from traditional password-based logins. The company said the changes are also meant to streamline autofill within its two-factor...
VulnCheck KEV: CVE-2024-21390
Microsoft Authenticator Elevation of Privilege Vulnerability...
HackerOne: Improper Authentication - 2FA OTP Reusable
Vulnerability description not provided...
Microsoft introduces passkeys for consumer accounts
Ten years ago, Microsoft envisioned a bold future: a world free of passwords. Every year, we celebrate World Password Day by updating you on our progress toward eliminating passwords for good. Today, we’re announcing passkey support for Microsoft consumer accounts, the next step toward our vision...
The vulnerability of the Microsoft Authenticator multi-factor authentication application lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Patch Tuesday, March 2024 Edition
Apple and Microsoft recently released software updates to fix dozens of security holes in their operating systems. Microsoft today patched at least 60 vulnerabilities in its Windows OS. Meanwhile, Apples new macOS Sonoma addresses at least 68 security weaknesses, and its latest update for iOS fix...
CVE-2024-21390
Microsoft Authenticator Elevation of Privilege Vulnerability...
CVE-2024-21390
Microsoft Authenticator Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Authenticator Elevation of Privilege Vulnerability...
CVE-2024-21390 Microsoft Authenticator Elevation of Privilege Vulnerability
...
CVE-2024-21390 Microsoft Authenticator Elevation of Privilege Vulnerability
...
Microsoft Authenticator Security Vulnerability
Microsoft Authenticator is an application for multi-factor authentication MFA from Microsoft Corporation USA. A security vulnerability exists in Microsoft Authenticator. An attacker could exploit the vulnerability to elevate privileges...
KLA65129 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Skype for Consumer can be...
How Microsoft can help you go passwordless this World Password Day
It’s that time of year again. World Password Day is May 4, 2023.1 There’s a reason it’s still going strong 10 years after being created by cybersecurity professionals. A recent study that analyzed more than 15 billion passwords found that the top 10 most popular passwords still include...