Microsoft Copilot

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-55145 MEDIUM PATCH This Month

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.

Microsoft Command Injection Microsoft Copilot

NVD

CVSS 3.1

6.3

EPSS

0.4%

CVE-2026-55145

EPSS 0% CVSS 6.3

MEDIUM PATCH This Month

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.

Microsoft Command Injection Microsoft Copilot

NVD