# Microsoft patches Android Authenticator flaw that could expose account tokens

_Published Tuesday, October 27, 2026 at 2:10 AM EDT · Security · Latest · Tier 2 — Notable_

Microsoft has patched a flaw in Authenticator for Android that could let untrusted apps impersonate Microsoft apps and obtain delegated account tokens, Cyber Security News reported. The vulnerability, CVE-2026-80097, carries a CVSS severity score of 8.6 and concerns malicious apps on Android.

## Sources

- [Techmeme](https://www.techmeme.com/261027/p2#a261027p2)

---
Canonical: https://techandbusiness.org/newswire/oWqqbcdxlRiy8k1dj4BWeV
Published: 2026-10-27T06:10:49.906Z
Story chronology: 2026-10-27T05:30:01.000Z
Retrieved: 2026-10-28T10:24:04.277Z
Publisher: Tech & Business (techandbusiness.org)