Microsoft Copilot
6 CVEs affecting Microsoft Copilot. Latest disclosed: 2026-09-17. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24301 | High | 8.8 | 2026-08-18 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose informatio… |
CVE-2026-45497 | High | 7.7 | 2026-06-04 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a n… |
CVE-2026-42824 | Medium | 6.5 | 2026-06-04 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information ove… |
CVE-2026-26136 | Medium | 6.5 | 2026-03-19 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose informatio… |
CVE-2026-55145 | Medium | 6.3 | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over… |
CVE-2026-55946 | Medium | 6.1 | 2026-09-17 | Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. |