vulnerability
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
HighCVSS 8.6
Summary
A flaw in Microsoft Authenticator for Android allowed malicious apps to steal work account tokens by impersonating trusted Microsoft apps like Teams. Microsoft states that exploitation has not been reported and is unlikely, but organizations should update to the latest version to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data