cve 2026 80097

The cve 2026 80097 tag on WindowsForum.com collects discussion of a Microsoft Authenticator for Android vulnerability that could expose work tokens to another app without properly verifying the requesting app. Microsoft patched the flaw during its September update cycle, and the detailed technical write-up appeared later, prompting coverage of what went wrong and why updating phones matters. Content under this tag focuses on the security advisory, the token-theft risk for organizations using Authenticator for work accounts, and practical guidance to confirm Android devices are running the fixed version. It is most relevant to administrators and users concerned with mobile identity security.