Vulnerabilidades do Microsoft 365 Copilot
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft 365 Copilot: 37 registro(s), com versões afetadas e correções.cpe:2.3:a:microsoft:365_copilot
CVE-2026-26133
Alta · 7.1
CWE-77 16/03/2026
M365 Copilot Information Disclosure Vulnerability
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-26134
Alta · 7.8
CWE-190 10/03/2026
Microsoft Office Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-26110
Alta · 7.8
CWE-843 10/03/2026
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-25180
Média · 5.5
CWE-125 10/03/2026
Windows Graphics Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
CVE-2026-24285
Alta · 7.0
CWE-416 10/03/2026
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-24307
Alta · 7.5
CWE-1287 22/01/2026
M365 Copilot Information Disclosure Vulnerability
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-62557
Alta · 7.8
CWE-416 09/12/2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62554
Alta · 7.8
CWE-843 09/12/2025
Microsoft Office Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-62199
Alta · 7.8
CWE-416 11/11/2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-60724
Crítica · 9.8
CWE-122 11/11/2025
GDI+ Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-59234
Alta · 7.8
CWE-416 14/10/2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-59227
Alta · 7.8
CWE-416 14/10/2025
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.