Copilot (Microsoft) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-17. Vendor: Microsoft.

CVEs of Copilot

• CVE-2026-55946 - CVSS 6.1 (medium), 2026-09-17: Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
• CVE-2026-24301 - CVSS 8.8 (high), 2026-08-18: Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose…
• CVE-2026-55145 - CVSS 7.1 (high), 2026-07-14: Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over…
• CVE-2026-45497 - CVSS 8.8 (high), 2026-06-04: Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a…
• CVE-2026-42824 - CVSS 7.5 (high), 2026-06-04: Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information…
• CVE-2026-26136 - CVSS 7.5 (high), 2026-03-19: Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose…