365 Copilot Chat (Microsoft) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-17. Vendor: Microsoft.
CVEs of 365 Copilot Chat
- CVE-2026-78501 - CVSS 8.6 (high), 2026-09-17: Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker…
- CVE-2026-26164 - CVSS 7.5 (high), 2026-05-07: Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information…
- CVE-2026-26129 - CVSS 7.5 (high), 2026-05-07: Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information…
- CVE-2026-26137 - CVSS 9.9 (critical), 2026-03-19: Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.
- CVE-2025-59286 - CVSS 9.3 (critical), 2025-10-09: Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a…
- CVE-2025-59272 - CVSS 9.3 (critical), 2025-10-09: Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information…
- CVE-2025-53787 - CVSS 8.2 (high), 2025-08-07: Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
- CVE-2025-53774 - CVSS 7.5 (high), 2025-08-07: Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
