Known vulnerabilities in Microsoft Authenticator for Android

Vendor: Microsoft
Software: Microsoft Authenticator for Android
Software CPE: cpe:2.3:a:microsoft:microsoft_authenticator_for_android:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Authenticator for Android Microsoft Authenticator for Android is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131546 - Exposure of sensitive information to an unauthorized actor
CVE-2026-41615		 CWE-200 Medium
No
No
 6.2605.2973 15.05.2026 SB2026051509
#VU123716 - Improper Authorization in Handler for Custom URL Scheme
CVE-2026-26123		 CWE-939 Medium
No
No
 6.2511.7533 10.03.2026 SB2026031078