Microsoft Copilot
Monthly
Command injection in Outlook Copilot (Microsoft Copilot) lets an authenticated, low-privileged attacker inject unneutralized special elements over the network to tamper with the service, with Microsoft's CVSS rating a high confidentiality impact alongside limited integrity impact. The flaw was reported and fixed by Microsoft (MSRC CVE-2026-55145) and carries a CVSS 3.1 base score of 7.1. No public exploit identified at time of analysis, and CISA SSVC records exploitation status as none.
Command injection in Outlook Copilot (Microsoft Copilot) lets an authenticated, low-privileged attacker inject unneutralized special elements over the network to tamper with the service, with Microsoft's CVSS rating a high confidentiality impact alongside limited integrity impact. The flaw was reported and fixed by Microsoft (MSRC CVE-2026-55145) and carries a CVSS 3.1 base score of 7.1. No public exploit identified at time of analysis, and CISA SSVC records exploitation status as none.