Microsoft Microsoft 365 Copilot's Business Chat vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Microsoft 365 Copilot's Business Chat: 5 record(s), with affected versions and fixes.
CVE-2026-78501
High · 8.6
CWE-77 Sep 17, 2026
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
CVE-2026-26164
High · 7.5
CWE-74 May 7, 2026
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-26129
High · 7.5
CWE-138 May 7, 2026
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-59286
Critical · 9.3
CWE-77 Oct 9, 2025
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-59272
Critical · 9.3
CWE-77 Oct 9, 2025
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.