VulnSocial

CVE-2026-80097Patch(microsoft / authenticator)

MEDIUMCVSS 8.6 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch microsoft authenticator systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

microsoft CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-287

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • authenticator

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
microsoft
Products
authenticator

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-08: 1Active Exploitation · 2026-09-08: 1Patch / Workaround · 2026-09-08: 1Technical Details · 2026-09-08: 109-08
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • kokumօtօ@__kokumoto
    Patch

    マイクロソフトの定例更新。過去最高の脆弱性974件が修正。Windowsで723件、Officeで222件。ゼロデイはWindows ALPCのCVE-2026-85880とWindows Update StackのCVE-2026-81963。 https://www.securityweek.com/microsoft-patches-record-974-vulnerabilities-including-two-exploited-zero-days/ 要注意なのはCVE-2026-55007（Exchange Serverの任意コード実行（RCE））、CVE-2026-80097​（Authenticatorの権限昇格（EoP））、CVE-2026-69465（SharePointのRCE）、CVE-2026-65669（SQL ServerのEoP）、およびCVE-2026-69525（リモートデスクトップサービスのRCE）等だとZDIの人。

    Post summary

    Microsoft released a security update addressing 974 vulnerabilities, including two actively exploited zero-days (CVE‑2026‑85880 and CVE‑2026‑81963), while highlighting other critical RCE and EoP issues across multiple products.

    020251.2K
    7.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftauthenticator-android-

Explore more

Back to dashboardmicrosoft CVEsauthenticator vulnerabilities