Microsoft Copilot vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Copilot: 6 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:copilot

CVE-2026-55946 Medium · 5.9 CWE-77 Sep 17, 2026

Microsoft Copilot Information Disclosure Vulnerability

Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-24301 High · 7.5 CWE-77 Aug 18, 2026

Command Injection in Microsoft Copilot

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-55145 High · 7.1 CWE-77 Jul 14, 2026

Outlook Copilot Tampering Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.

CVE-2026-45497 High · 8.8 CWE-77 Jun 4, 2026

Microsoft M365 Copilot Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.

CVE-2026-42824 High · 7.5 CWE-77 Jun 4, 2026

M365 Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-26136 High · 7.5 CWE-77 Mar 19, 2026

Microsoft Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.