Microsoft Microsoft Copilot
3 CVEs affecting Microsoft Microsoft Copilot. Latest disclosed: 2026-09-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-26136 | Medium | 6.5 | 2026-03-19 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose informatio… |
CVE-2026-55145 | Medium | 6.3 | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over… |
CVE-2026-55946 | Medium | 6.1 | 2026-09-17 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose informatio… |