Microsoft 365 Copilot Chat vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft 365 Copilot Chat: 6 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:365_copilot_chat
CVE-2026-78501
High · 8.6
CWE-77 Sep 17, 2026
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
CVE-2026-26164
High · 7.5
CWE-74 May 7, 2026
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-26129
High · 7.5
CWE-138 May 7, 2026
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-26137
Critical · 9.9
CWE-918 Mar 19, 2026
Microsoft Exchange Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.
CVE-2025-59286
Critical · 9.3
CWE-77 Oct 9, 2025
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-59272
Critical · 9.3
CWE-77 Oct 9, 2025
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.