Vulnerability · NVD

CVE-2024-21390

HIGH 7.1 Published on 2024-03-12

Microsoft Authenticator Elevation of Privilege Vulnerability

Attack vector : Local No privileges required

Show raw CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS 1.27% above median percentile 67.0%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Microsoft Authenticator Android com.azure.authenticator

Affected <6.2401.0617 Fixed in 6.2401.0617 Latest tracked 6.2607.4697 patched

Vulnerable CPE configurations (2)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	authenticator All platforms (wildcard)	All platforms (wildcard)	<6.2401.0617	cpe:2.3:a:microsoft:authenticator::::::::
microsoft	authenticator All platforms (wildcard)	All platforms (wildcard)	<6.2401.0617	cpe:2.3:a:microsoft:authenticator::::::::