CVE-2024-21390

CVE-2024-21390 concerns a local elevation-of-privilege in the Microsoft Authenticator app. The available sources consistently identify the affected software as the Microsoft Authenticator (MSA) mobile app and describe an attacker needing prior access on the device to exploit the issue. Microsoft’...

CVE-2026-26123

Summary: CVE-2026-26123 affects Microsoft Authenticator for iOS and Android. A malicious app on the same device could intercept sign-in flows by hijacking deep links/QR-based sign-ins, potentially exposing one-time codes and allowing account takeover, bypassing MFA protections. The vulnerability ...

CVE-2026-41615

CVE-2026-41615 affects Microsoft Authenticator. The available documents identify an information disclosure vulnerability that could allow an unauthorized network actor to exfiltrate sensitive data from the Microsoft Authenticator component. The CVSS 3.1 score is 9.6 (CRITICAL) with Network attack...