Microsoft Authenticator
- Known vulnerabilities
- 1
- Still open
- 0
- KEV open
- 0
- Max CVSS score
- 5.5
Known vulnerabilities (CVE)
Test a different version
| CVE | Status | Severity | KEV | Published | Fixed in |
|---|---|---|---|---|---|
|
CVE-2026-26123
MEDIUM 5.5
Fixed in: 6.8.40
|
Fixed | MEDIUM 5.5 | — | 6.8.40 |
Security Score
Excellent · 100/100
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
See breakdown
- Open CVEs 0/-50 0 CVEs
- Open KEVs 0/-40 0 KEVs
- Vendor 0/-10 100% fresh
Privacy Score
Respectful · 100/100
Composite: 40% critical shared + 30% high shared + 20% high collected + 10% sensitive density.
See breakdown
- Critical shared 0/-40 0 critical shared
- High shared 0/-30 0 high + 0 medium shared
- High collected 0/-20 1 high + 3 medium collected
- Sensitive density 0/-10 17% sensitive
Context
Context
Description
Use Microsoft Authenticator for easy, secure sign-ins for all your online accounts using multi-factor authentication, passwordless, or password autofill. You also have additional account management options for your Microsoft personal, work or school accounts. Getting started with multi-factor authentication Multi factor authentication (MFA)provides a second layer of security. When enabled, during login after entering your password, you’ll be asked for an additional way to prove it’s really you. Either approve the notification sent to the Microsoft Authenticator, or enter the one-time password (OTP) generated by the app. The OTP codes have a 30 second timer counting down. This timer is so you never have to use the same time-based one-time password (TOTP) twice and you don’t have to remember the number. The OTP doesn’t require you to be connected to a network, and it won’t drain your battery. You can add multiple accounts to your app, including non-Microsoft accounts like Facebook, Amazon, Dropbox, Google, LinkedIn, GitHub, and more. Getting started with passwordless Use your phone, not your password, to log into your Microsoft account. Just enter your username, then approve the…
Data collected and shared
Source: App Store · App Privacy · 6 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by Microsoft Corporation
com.microsoft.loop
com.microsoft.skydrive
msstore:9WZDNCRFJBBG
com.microsoft.crm.crmphone
com.microsoft.crm.crmphone.sales
msstore:9PMMSR1CGPWG