Skip to content
OpenAdvisories

Product · Microsoft

Microsoft 365 Copilot

14 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.7

    M365 Copilot Information Disclosure Vulnerability

    Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

  • High 8.8

    Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability

    Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.

  • High 7.7

    Microsoft M365 Copilot Remote Code Execution Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.