HarborGuard / CVE
Back to search
CRITICALCVE-2026-41615Published Modified CNA microsoft

CVE-2026-41615: Microsoft Authenticator Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

Metrics

CVSS v3.1
9.6
Severity
CRITICAL
Fixed in
6.8.47
Affected Products
2

Fix available

6.8.476.2605.2973
Patch commits
Affected packages
  • Microsoft / Microsoft Authenticator for Android
    < 6.2605.2973 (from 6.0.0)
  • Microsoft / Microsoft Authenticator for IOS
    < 6.8.47 (from 6.0.0)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
References