Microsoft 365 Copilot
Monthly
Remote code execution in Microsoft 365 Copilot allows an authenticated attacker to run arbitrary code over the network by supplying maliciously crafted serialized data (CWE-502). The flaw carries a CVSS 9.9 rating driven by a scope change and full confidentiality, integrity, and availability impact, and because Copilot is a Microsoft-hosted cloud service, exploitation would affect the shared multi-tenant platform. No public exploit identified at time of analysis (CVSS exploit maturity is Unproven), but a vendor fix has been released via MSRC.
Privilege elevation in Microsoft 365 Copilot arises from an open redirect (CWE-601) that lets an unauthenticated remote attacker craft a Copilot-hosted URL that forwards a victim to an attacker-controlled site. Per the CVSS vector this requires the victim to interact (UI:R) with the malicious link and results in a scope change with high confidentiality and integrity impact, consistent with token/credential capture enabling elevated access. There is no public exploit identified at time of analysis (Exploit Maturity: Unproven), and it is not listed in CISA KEV; Microsoft rates it 9.3 and reports an official fix is available.
Information disclosure in Microsoft 365 Copilot lets a remote, unauthenticated attacker reach a security-critical function that lacks an authentication check, exposing confidential data over the network. Classified CWE-306 (Missing Authentication for Critical Function) and rated CVSS 7.5, the flaw was reported by Microsoft and a vendor patch is available; there is no public exploit identified at time of analysis, though CISA's SSVC framework flags the issue as automatable with total technical impact. EPSS probability is low (0.50%, 39th percentile), indicating no current evidence of widespread exploitation.
Command injection in Microsoft 365 Copilot allows an authenticated attacker with low privileges to execute arbitrary code over a network, achieving full compromise of confidentiality, integrity, and availability (CVSS 8.8). The flaw stems from improper neutralization of special elements passed into a command context (CWE-77), meaning attacker-influenced input reaches a command interpreter. There is no public exploit identified at time of analysis and EPSS is very low (0.08%, 25th percentile), but the total technical impact and Microsoft-confirmed patch make this a meaningful priority for tenants using Copilot.
Information disclosure in Microsoft 365 Copilot allows remote unauthenticated attackers to exfiltrate data via command injection (CWE-77) over the network. Microsoft reported the issue (CVE-2026-42824) with a CVSS 3.1 base score of 7.5 reflecting high confidentiality impact only, and publicly available exploit code exists though it is not listed in CISA KEV. EPSS is very low at 0.08% (24th percentile) and the CISA SSVC decision framework rates exploitation as 'none' and automatable as 'no', suggesting realistic exploitation is currently limited despite the POC.
Information disclosure in Microsoft 365 Copilot lets an unauthorized remote attacker inject specially crafted command elements over the network to read data they should not have access to. The flaw is a command-injection weakness (CWE-77) whose impact is confined to confidentiality (C:H, no integrity or availability effect), and it was reported by Microsoft with a patch issued through the MSRC update guide. There is no public exploit identified at time of analysis, EPSS is very low (0.06%), and CISA SSVC records exploitation status as none.
Privilege elevation in Microsoft 365 Copilot via an open redirect (CWE-601) lets an unauthenticated remote attacker abuse the AI assistant's URL-handling to bounce a victim to an attacker-controlled site and elevate privileges over the network. Rated CVSS 9.3 with a scope-changed vector because the redirect crosses a trust boundary, though exploitation requires the victim to interact (click) with the crafted link. No public exploit identified at time of analysis and EPSS is very low (0.04%), indicating no observed real-world exploitation despite the high severity score.
Remote code execution in Microsoft 365 Copilot allows an authenticated attacker to run arbitrary code over the network by supplying maliciously crafted serialized data (CWE-502). The flaw carries a CVSS 9.9 rating driven by a scope change and full confidentiality, integrity, and availability impact, and because Copilot is a Microsoft-hosted cloud service, exploitation would affect the shared multi-tenant platform. No public exploit identified at time of analysis (CVSS exploit maturity is Unproven), but a vendor fix has been released via MSRC.
Privilege elevation in Microsoft 365 Copilot arises from an open redirect (CWE-601) that lets an unauthenticated remote attacker craft a Copilot-hosted URL that forwards a victim to an attacker-controlled site. Per the CVSS vector this requires the victim to interact (UI:R) with the malicious link and results in a scope change with high confidentiality and integrity impact, consistent with token/credential capture enabling elevated access. There is no public exploit identified at time of analysis (Exploit Maturity: Unproven), and it is not listed in CISA KEV; Microsoft rates it 9.3 and reports an official fix is available.
Information disclosure in Microsoft 365 Copilot lets a remote, unauthenticated attacker reach a security-critical function that lacks an authentication check, exposing confidential data over the network. Classified CWE-306 (Missing Authentication for Critical Function) and rated CVSS 7.5, the flaw was reported by Microsoft and a vendor patch is available; there is no public exploit identified at time of analysis, though CISA's SSVC framework flags the issue as automatable with total technical impact. EPSS probability is low (0.50%, 39th percentile), indicating no current evidence of widespread exploitation.
Command injection in Microsoft 365 Copilot allows an authenticated attacker with low privileges to execute arbitrary code over a network, achieving full compromise of confidentiality, integrity, and availability (CVSS 8.8). The flaw stems from improper neutralization of special elements passed into a command context (CWE-77), meaning attacker-influenced input reaches a command interpreter. There is no public exploit identified at time of analysis and EPSS is very low (0.08%, 25th percentile), but the total technical impact and Microsoft-confirmed patch make this a meaningful priority for tenants using Copilot.
Information disclosure in Microsoft 365 Copilot allows remote unauthenticated attackers to exfiltrate data via command injection (CWE-77) over the network. Microsoft reported the issue (CVE-2026-42824) with a CVSS 3.1 base score of 7.5 reflecting high confidentiality impact only, and publicly available exploit code exists though it is not listed in CISA KEV. EPSS is very low at 0.08% (24th percentile) and the CISA SSVC decision framework rates exploitation as 'none' and automatable as 'no', suggesting realistic exploitation is currently limited despite the POC.
Information disclosure in Microsoft 365 Copilot lets an unauthorized remote attacker inject specially crafted command elements over the network to read data they should not have access to. The flaw is a command-injection weakness (CWE-77) whose impact is confined to confidentiality (C:H, no integrity or availability effect), and it was reported by Microsoft with a patch issued through the MSRC update guide. There is no public exploit identified at time of analysis, EPSS is very low (0.06%), and CISA SSVC records exploitation status as none.
Privilege elevation in Microsoft 365 Copilot via an open redirect (CWE-601) lets an unauthenticated remote attacker abuse the AI assistant's URL-handling to bounce a victim to an attacker-controlled site and elevate privileges over the network. Rated CVSS 9.3 with a scope-changed vector because the redirect crosses a trust boundary, though exploitation requires the victim to interact (click) with the crafted link. No public exploit identified at time of analysis and EPSS is very low (0.04%), indicating no observed real-world exploitation despite the high severity score.