← Back

CVE-2026-26123

nvd nist
Published: Mar 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally.

Affected (2)

Microsoft
1 product
Authenticator
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Authenticator
Before 6.2511.7533
Authenticator
Before 6.8.40

Related CWEs

CWE-939
Improper Authorization in Handler for Custom URL Scheme
The product uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.

References (1)

Source: secure@microsoft.com
Vendor Advisory

Timeline

No history available yet.