EUVD-2026-82600
GHSA-g3r4-5f4w-4vh4
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Authorized attacker maps to PR:L; network-reachable low-complexity with no UI; incorrect permission crossing a security boundary gives S:C with C:H and no integrity/availability impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
AnalysisAI
Information disclosure in Microsoft 365 Copilot allows an authenticated, low-privileged user within an affected tenant to retrieve content that should fall outside their authorization boundary, with the disclosed data potentially belonging to a different security authority than the attacker (scope change). Exploitation is network-reachable, low complexity, and requires no user interaction, but it is not unauthenticated - the attacker must already hold a valid low-privileged identity in a tenant where Copilot is enabled, per the assessed vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, base 7.7). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the attacker to already possess a valid, authorized (low-privileged) identity within Microsoft 365 Copilot / the tenant (PR:L) - it is NOT an unauthenticated flaw. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, base 7.7) describes a low-complexity, network-reachable information disclosure requiring some level of pre-existing authorization (PR:L) and no user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No customer-applied patch exists for this issue: Microsoft 365 Copilot is a Microsoft-hosted service, and per the assessment the vulnerability is remediated server-side by Microsoft with no customer configuration change required, so the primary action is to verify against Microsoft's advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85887) that the service-side fix has been applied in your tenant region and to track that record for Microsoft's remediation timeline and any tenant-side guidance. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm which Microsoft 365 Copilot tenants and user groups are enabled, temporarily revoke or suspend Copilot licenses for users who do not have a business need, enforce least-privilege access and conditional access for Copilot users, and review available audit logs for unusual Copilot access to content outside expected boundaries. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in 365 Copilot
View allCVE-2025-32711 is an AI command injection vulnerability in Microsoft 365 Copilot that enables unauthenticated network-ba
Microsoft Office app Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.6), this vulnerability is remo
M365 Copilot has an input validation vulnerability allowing unauthorized attackers to extract sensitive information thro
Command injection in Microsoft 365 Copilot lets an authenticated, low-privilege user with network access to the service
Privilege elevation in Microsoft 365 Copilot's Business Chat is possible when an attacker abuses an open redirect (CWE-6
Local code execution in Microsoft Office is possible via a heap-based buffer overflow that an unauthorized attacker can
Local code execution in Microsoft Office is possible through a heap-based buffer overflow that an unauthorized attacker
Local code execution in Microsoft Office via a heap-based buffer overflow allows an unauthorized attacker to run arbitra
Local code execution in Microsoft Office via a heap-based buffer overflow that lets an unauthorized attacker run arbitra
Command injection in Microsoft 365 Copilot lets a remote, unauthenticated attacker tamper with data and integrity over t
M365 Copilot is vulnerable to command injection that enables unauthenticated remote attackers to extract sensitive infor
Out-of-bounds read (buffer over-read) in Microsoft Office exposes sensitive memory contents to a local attacker who can
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today