365 Word Copilot
Monthly
Information disclosure in Microsoft 365 Word Copilot enables unauthenticated attackers to extract sensitive data through improper handling of escape and control sequences in network communications. The vulnerability requires user interaction to trigger and affects the Copilot AI/ML service with a CVSS score of 7.4. No patch is currently available.
Command injection in Microsoft 365 Word Copilot allows an unauthenticated remote attacker to disclose information from the service, with the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) indicating that no credentials, no user interaction, and only low attack complexity are needed to reach and trigger the flaw over the network, and that exploitation can affect resources beyond the vulnerable component's own security scope while the primary impact is high confidentiality loss with limited integrity impact. Because the vulnerable component is a Microsoft-operated cloud service rather than a customer-installed product, exposure is bounded by Microsoft's service-side remediation window instead of any customer-controlled configuration, and the single available MSRC advisory does not disclose the specific feature, protocol, or input channel that carries the injected command. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV); EPSS is 0.57% (45th percentile), placing predicted near-term exploitation slightly below the median, so the very high base score reflects theoretical worst-case severity rather than observed attacker activity.
Information disclosure in Microsoft 365 Word Copilot enables unauthenticated attackers to extract sensitive data through improper handling of escape and control sequences in network communications. The vulnerability requires user interaction to trigger and affects the Copilot AI/ML service with a CVSS score of 7.4. No patch is currently available.
Command injection in Microsoft 365 Word Copilot allows an unauthenticated remote attacker to disclose information from the service, with the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) indicating that no credentials, no user interaction, and only low attack complexity are needed to reach and trigger the flaw over the network, and that exploitation can affect resources beyond the vulnerable component's own security scope while the primary impact is high confidentiality loss with limited integrity impact. Because the vulnerable component is a Microsoft-operated cloud service rather than a customer-installed product, exposure is bounded by Microsoft's service-side remediation window instead of any customer-controlled configuration, and the single available MSRC advisory does not disclose the specific feature, protocol, or input channel that carries the injected command. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (CISA KEV); EPSS is 0.57% (45th percentile), placing predicted near-term exploitation slightly below the median, so the very high base score reflects theoretical worst-case severity rather than observed attacker activity.