365 Copilot IOS (Microsoft) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-14. Vendor: Microsoft.

CVEs of 365 Copilot IOS

• CVE-2026-58617 - CVSS 9.8 (critical), 2026-07-14: Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-41090 - CVSS 9.3 (critical), 2026-05-22: Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering…
• CVE-2026-26133 - CVSS 7.1 (high), 2026-03-16: AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.