Microsoft 365 Copilot For Android
Monthly
Remote code execution in the Microsoft 365 Copilot mobile apps for Android and iOS lets an unauthenticated attacker run code across a security boundary by getting a user to interact with crafted content (CWE-77 command injection). The CVSS 9.6 rating reflects network reach, low complexity, no privileges, and a changed scope with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis, but a vendor patch is available and the flaw was self-reported by Microsoft.
CVE-2026-26133 is an AI command injection vulnerability in Microsoft 365 Copilot and multiple Microsoft mobile/desktop applications that allows remote attackers to disclose sensitive information through crafted AI prompts. The vulnerability affects numerous Microsoft products across iOS, Android, and macOS platforms, requires user interaction, and has a patch available from Microsoft with no current evidence of active exploitation (not in KEV).
Spoofing via improper access control in Microsoft 365 Copilot for Android (versions prior to 16.0.19822.20190) enables a locally authenticated attacker with low privileges to manipulate identity or content presentation within the application. The CVSS vector (AV:L/PR:L) confirms exploitation requires prior local access and an authenticated foothold on the device - this is not a remote or unauthenticated threat. No public exploit code exists and no active exploitation has been identified; EPSS sits at 0.04% (11th percentile) and CISA SSVC rates it non-automatable with only partial technical impact.
Remote code execution in the Microsoft 365 Copilot mobile apps for Android and iOS lets an unauthenticated attacker run code across a security boundary by getting a user to interact with crafted content (CWE-77 command injection). The CVSS 9.6 rating reflects network reach, low complexity, no privileges, and a changed scope with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis, but a vendor patch is available and the flaw was self-reported by Microsoft.
CVE-2026-26133 is an AI command injection vulnerability in Microsoft 365 Copilot and multiple Microsoft mobile/desktop applications that allows remote attackers to disclose sensitive information through crafted AI prompts. The vulnerability affects numerous Microsoft products across iOS, Android, and macOS platforms, requires user interaction, and has a patch available from Microsoft with no current evidence of active exploitation (not in KEV).
Spoofing via improper access control in Microsoft 365 Copilot for Android (versions prior to 16.0.19822.20190) enables a locally authenticated attacker with low privileges to manipulate identity or content presentation within the application. The CVSS vector (AV:L/PR:L) confirms exploitation requires prior local access and an authenticated foothold on the device - this is not a remote or unauthenticated threat. No public exploit code exists and no active exploitation has been identified; EPSS sits at 0.04% (11th percentile) and CISA SSVC rates it non-automatable with only partial technical impact.