Skip to content
OpenAdvisories
Medium WID-SEC-2026-1411 2 CVEs

Microsoft 365 Copilot Business Chat: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published May 7, 2026 · Updated May 7, 2026 · de-DE

Vendor: Microsoft Product: 365 Copilot Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft 365 Copilot Business Chat ausnutzen, um Informationen offenzulegen.

Product

Microsoft Copilot ist ein KI-Assistent, der in verschiedene Microsoft-Produkte integriert werden kann.

Vulnerabilities 2

  • High 7.5
    CVE-2026-26129

    M365 Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft 365 Copilot's Business Chat
  • High 7.5
    CVE-2026-26164

    M365 Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft 365 Copilot's Business Chat

Revision history

  1. #1

    Initiale Fassung

References