{"id":"CVE-2020-0943","aliases":["EUVD-2020-2411","GHSA-5g9w-mffc-46fh"],"status":"published","title":"An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for...","description":"An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0137,"percentile":0.72135,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2020-04-15T15:12:57Z","modified":"2026-06-17T02:47:02Z","products":[{"vendor":"microsoft","product":"microsoft your phone companion app for android"},{"vendor":"microsoft","product":"your_phone_companion"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0943","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0943"},{"url":"https://github.com/advisories/GHSA-5g9w-mffc-46fh"}],"sources":{"cve":[{"id":"CVE-2020-0943","description":"An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.","status":"published","published":"2020-04-15T15:12:57Z","modified":"2024-08-04T06:18:03.613Z","updated_at":"2026-11-02T14:35:59.763887Z"}],"euvd":[{"id":"EUVD-2020-2411","description":"An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.","status":"published","published":"2020-04-15T15:12:57Z","modified":"2024-08-04T06:18:03Z","updated_at":"2026-11-03T03:08:16.431929Z"}],"ghsa":[{"id":"GHSA-5g9w-mffc-46fh","title":"An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for...","description":"An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.","status":"published","published":"2022-05-24T17:14:30Z","modified":"2023-01-29T05:02:16Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:45:02.517815Z"}],"nvd":[{"id":"CVE-2020-0943","description":"An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android Authentication Bypass Vulnerability'.","status":"published","published":"2020-04-15T15:15:16.823Z","modified":"2026-06-17T02:47:02.413Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:05:59.125695Z"}]}}