CVE-2026-80097

Published Sep 8, 2026

Last updated a day ago

CVSS high 8.6
Zero-day

Overview

Description
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
Source
secure@microsoft.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.6
Impact score
6
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity
HIGH

Weaknesses

secure@microsoft.com
CWE-287

Social media

Hype score
Not currently trending

  1. マイクロソフトの定例更新。過去最高の脆弱性974件が修正。Windowsで723件、Officeで222件。ゼロデイはWindows ALPCのCVE-2026-85880とWindows Update StackのCVE-2026-81963。 https://t.co/vpzzxfM6ym 要注意なのはCVE-2026-55007（Exchange Server

    @__kokumoto

    8 Sept 2026

    983 Impressions

    2 Retweets

    2 Likes

    5 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.•CVE-2026-55007
  2. Gitea Code Injection Vulnerability•CVE-2026-60004
  3. TrueConf Server Code Injection Vulnerability•CVE-2026-72530
  4. TrueConf Server Missing Authentication for Critical Function Vulnerability•CVE-2026-72529
  5. JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability•CVE-2026-66384

References

Sources include official advisories and independent security research.