VYPR
← All advisories
Critical severity9.6NVD Advisory· Published May 14, 2026· Updated May 15, 2026

CVE-2026-41615

CVE-2026-41615

Description

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

Affected products

3
  • Microsoft/Microsoft Authenticator3 versions
    cpe:2.3:a:microsoft:authenticator:*:*:*:*:*:android:*:*+ 2 more
    • cpe:2.3:a:microsoft:authenticator:*:*:*:*:*:android:*:*range: <6.2605.2973
    • cpe:2.3:a:microsoft:authenticator:*:*:*:*:*:iphone_os:*:*range: <6.8.47
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.