Skip to content
OpenAdvisories
High MSRC-CVE-2026-41100 1 CVE

Microsoft 365 Copilot for Android Spoofing Vulnerability

Published May 12, 2026 · Updated Jun 9, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?
An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).

Security updates
16.0.19822.20190 — https://play.google.com/store/search?q=copilot+365&c=apps
16.0.19822.20190 — https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US
16.0.19822.20190 — https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US
16.0.19822.20190 — https://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US
16.0.19822.20190 — https://play.google.com/store/apps/details?id=com.microsoft.loop
16.0.19822.20190 — https://play.google.com/store/apps/details?id=com.microsoft.office.onenote

Vulnerabilities 1

Revision history

  1. #2

    Added Microsoft Excel for Android, Microsoft Word for Android, Microsoft Loop for Android, Microsoft PowerPoint for Android and Microsoft OneNote for Android softwares to the Security Updates table. Customers that are running supported version of these products are encouraged to update to the indicated versions to be protected from this vulnerability.

  2. #1

    Information published.

References