{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability/$entity","id":"00000000-0000-0000-0000-00002a31306b","releaseDate":"2026-09-08T07:00:00-07:00","cveNumber":"CVE-2026-80097","cveTitle":"Microsoft Authenticator Elevation of Privilege Vulnerability","releaseNumber":"2026-Sep","vulnType":"Security Vulnerability","latestRevisionDate":"2026-09-15T07:00:00-07:00","description":"<p>Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.</p>\n","cweList":["CWE-287: Improper Authentication"],"cweDetailsListForSearch":["cwe: CWE-287: Improper Authentication","cweUrl: https://cwe.mitre.org/data/definitions/287.html"],"unformattedDescription":"<p>Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.</p>","mitreText":"CVE-2026-80097","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80097","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Authenticator","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"8.6","temporalScore":"7.5","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-287: Improper Authentication","https://cwe.mitre.org/data/definitions/287.html"]}],"articles":[{"articleType":"FAQ","description":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could potentially gain the ability to authenticate against a remote host using the current user\u2019s credentials.</p>\n","ordinal":10000},{"articleType":"FAQ","description":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An attacker could exploit this vulnerability by installing and running a malicious application on an affected Android device and convincing the user to complete an authentication flow in Microsoft Authenticator. Successful exploitation could allow the attacker to obtain authentication tokens and access resources as the affected user.</p>\n","ordinal":10000},{"title":"Microsoft Authenticator Elevation of Privilege Vulnerability","articleType":"100000000","description":"<p>Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.</p>\n","ordinal":10000},{"title":"Microsoft Authenticator Elevation of Privilege Vulnerability","articleType":"100000000","description":"<p>Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.</p>\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-80097","version":1,"revisionDate":"2026-09-08T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"4b2daf4e-26a3-f111-93a1-000d3ac5fb71"},{"cveNumber":"CVE-2026-80097","version":1.1,"revisionDate":"2026-09-15T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Corrected fix build number. Informational change only.</p>\n","unformattedDescription":"Corrected fix build number. Informational change only.","notificationNeeded":false,"notificationSent":false,"sourceId":"a9329bf7-27b1-f111-93fe-000d3afbc7d7"}]}