Skip to content
OpenAdvisories

Product · Microsoft

Microsoft 365 Copilot

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-42895

    Microsoft Copilot Tampering Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.

    Microsoft Microsoft 365 Copilot
  • Medium 6.5
    CVE-2026-42824

    M365 Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft 365 Copilot
  • Medium 6.5
    CVE-2026-42827

    M365 Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft 365 Copilot
  • Medium 5.3
    CVE-2026-24299

    M365 Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft 365 Copilot