CVE-2026-41102

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 3, 2026

Last Seen

June 3, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Microsoft 365 Android Apps Vulnerability Exposes User Accounts to Takeover72.0

A coding error in Microsoft 365 Android applications allowed unauthorized apps to access user account tokens, leading to potential account takeovers. This vulnerability, known as FlagLeft, was due to a debug flag left enabled in production code across six major apps, including Word and Excel. Attack...