A debug flag left active in six Microsoft 365 Android apps allowed another installed app on the same device to request account tokens without user interaction. A debug flag left active in production ...
Microsoft 365 Android apps exposed account tokens through a production coding error. FlagLeft vulnerabilities let malicious Android apps impersonate signed-in ...
Microsoft's Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve authentication tokens stored in Windows, Linux, and macOS ...