Microsoft Authenticator
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Authenticator.
Recent Microsoft Authenticator Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-26123 | CVE-2026-26123 Microsoft Authenticator Information Disclosure Vulnerability | March 10, 2026 |
| CVE-2024-21390 | Microsoft Authenticator Elevation of Privilege Vulnerability | March 12, 2024 |
By the Year
In 2026 there have been 1 vulnerability in Microsoft Authenticator with an average score of 5.5 out of ten. Authenticator did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 5.50 |
| 2025 | 0 | 0.00 |
| 2024 | 1 | 7.10 |
It may take a day or so for new Authenticator vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Authenticator Security Vulnerabilities
Mar 2026: Microsoft Authenticator Information Disclosure Vulnerability
CVE-2026-26123
5.5 - Medium
- March 10, 2026
Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose information locally.
Improper Authorization in Handler for Custom URL Scheme
CVE-2024-21390: Microsoft Authenticator EoP Vulnerability
CVE-2024-21390
7.1 - High
- March 12, 2024
Microsoft Authenticator Elevation of Privilege Vulnerability
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Authenticator or by Microsoft? Click the Watch button to subscribe.