Microsoft 365 Word Copilot vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft 365 Word Copilot: 2 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:365_word_copilot

CVE-2026-21521 High · 7.4 CWE-150 Jan 22, 2026

Word Copilot Information Disclosure Vulnerability

Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2025-59252 Critical · 9.3 CWE-77 Oct 9, 2025

M365 Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.