Microsoft Microsoft 365 Copilot For Android
3 CVEs affecting Microsoft Microsoft 365 Copilot For Android. Latest disclosed: 2026-07-14. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-48561 | Critical | 9.6 | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute code over a… |
CVE-2026-26133 | High | 7.1 | 2026-03-16 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
CVE-2026-41100 | Medium | 4.4 | 2026-05-12 | Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. |