NetSight
critical9.6

CVE-2026-41615

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

Impact

Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.

Affected products

VendorProductAffected versions
MicrosoftAuthenticator
before 6.8.47
before 6.2605.2973

Weakness classification

References