Description
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft 365 Copilot for Android | 1.0 – < 16.0.19815.10000 | 16.0.19815.10000 |
| Microsoft | Microsoft 365 Copilot for iOS | 1.0 – < 2.107.2 | 2.107.2 |
| Microsoft | Microsoft Edge for Android | 1.0.0 – < 145.3800.99 | 145.3800.99 |
| Microsoft | Microsoft Edge for iOS | 1.0.0.0 – < 145.3800.99 | 145.3800.99 |
| Microsoft | Microsoft Excel for Android | 16.0.0.0 – < 16.0.19822.20038 | 16.0.19822.20038 |
| Microsoft | Microsoft Excel for iOS | 1.0 – < 2.106.26020617 | 2.106.26020617 |
| Microsoft | Microsoft Loop for iOS | 2.0.0 – < 2.106.26020617 | 2.106.26020617 |
| Microsoft | Microsoft OneNote | 1.0.0 – < 2.106.26020617 | 2.106.26020617 |
| Microsoft | Microsoft OneNote for Android | 16.0.1 – < 16.0.19725.20142 | 16.0.19725.20142 |
| Microsoft | Microsoft Outlook for Android | 1.0 – < 5.2605 | 5.2605 |
| Microsoft | Microsoft Outlook for iOS | 1.0.0 – < 5.2605 | 5.2605 |
| Microsoft | Microsoft Outlook for Mac | 1.0.0 – < 5.2605 | 5.2605 |
| Microsoft | Microsoft PowerBI for Android | 2.0.0 – < 2.2.260210.21290750 | 2.2.260210.21290750 |
| Microsoft | Microsoft PowerBI for iOS | 1.0.0 – < 1.2.260302.2193910 | 1.2.260302.2193910 |
| Microsoft | Microsoft PowerPoint for Android | 16.0.0.0 – < 16.0.19822.20038 | 16.0.19822.20038 |
| Microsoft | Microsoft PowerPoint for iOS | 1.0 – < 2.106.26020617 | 2.106.26020617 |
| Microsoft | Microsoft Teams for Android | 1.0.0 – < 1.0.0.2026043102 | 1.0.0.2026043102 |
| Microsoft | Microsoft Teams for iOS | 2.0.0 – < 8.3.1 | 8.3.1 |
| Microsoft | Microsoft Word for Android | 16.0.0.0 – < 16.0.19822.20038 | 16.0.19822.20038 |
| Microsoft | Microsoft Word for iOS | 2.0.0 – < 2.106.26020617 | 2.106.26020617 |
Advisories 2
- MSRC-CVE-2026-26133 M365 Copilot Information Disclosure Vulnerability Microsoft Security Response Center · Apr 9, 2026
- WID-SEC-2026-0717 Microsoft 365 Copilot und Edge: Schwachstelle ermöglicht Offenlegung von Informationen und Manipulation von Daten BSI CERT-Bund (WID) · Mar 15, 2026
References
- M365 Copilot Information Disclosure Vulnerability vendor-advisory patch