Android Google Play Microsoft Corporation
Microsoft Authenticator
Current version
6.2608.5658
com.azure.authenticator
Version 6.2608.5658 of Microsoft Authenticator on Android has no known open CVE (3 referenced, fixed or indeterminable).
- Known vulnerabilities
- 3
- Still open
- 0
- KEV open
- 0
- Max CVSS (open)
- -
9.6 historical
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
6.2608.5658 closes no known CVE
No CVE is open on this version, and none was fixed by it. 3 were fixed in earlier versions, listed below.
Show 3 CVEs fixed in earlier versions Hide the 3 CVEs fixed earlier
| CVE |
|---|
|
CVE-2026-41615
Fixed
CRITICAL 9.6
Network Fixed in: 6.2605.2973
|
|
CVE-2026-26123
Fixed
MEDIUM 5.5
Local Fixed in: 6.2511.7533
|
|
CVE-2024-21390
Fixed
HIGH 7.1
Local Fixed in: 6.2401.0617
|
Security Score
Excellent
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
-
Open CVEs 0/-50
0 CVEs
-
Open KEVs 0/-40
0 KEVs
-
Vendor 0/-10
100% fresh
Cumulative exposure
Low
Weighted sum capped at 100: open CVEs (max 50 pts) + KEV (max 35) + critical shared permissions (max 10) + trackers (max 8) + OS EOL (max 5). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Context
Context
Description
No more passwords, easier sign-in, and greater protection for your accounts.
Data collected and shared
Source: Play Store Data Safety · 3 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Technical details
- Publisher
- Microsoft Corporation
- Distribution channel
- Google Play
- Identifier
- com.azure.authenticator
Other apps by this publisher
Apps published by Microsoft Corporation
73 apps tracked · no open CVE
msstore:9WZDNCRFJBBG
com.microsoft.copilot
com.microsoft.crm.crmphone
com.microsoft.crm.crmphone.sales
msstore:9PMMSR1CGPWG
com.microsoft.LinkToWindowsFAQ
FAQ: Microsoft Authenticator
Does Microsoft Authenticator have known security vulnerabilities?
Microsoft Authenticator (com.azure.authenticator) on Android has 3 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of Microsoft Authenticator affected by any open CVE?
Version 6.2608.5658 of Microsoft Authenticator on Android has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is Microsoft Authenticator affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Microsoft Authenticator (com.azure.authenticator) is currently in the CISA KEV catalog.
What is the latest known version of Microsoft Authenticator?
The most recent version of Microsoft Authenticator (com.azure.authenticator) tracked by Appaloosa Scout is 6.2608.5658, published by Microsoft Corporation.