Microsoft 365 Copilot vulnerabilities, page 3
49 vulnerabilities
Known vulnerabilities in Microsoft 365 Copilot, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-24307microsoft365_copilot+1
EPSS score0.91%
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.CVE-2026-24285microsoft365_copilot+29EPSS score0.47%
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-45460microsoft365_apps+13EPSS score0.42%
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-50517microsoft365_copilot+1EPSS score1.69%
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.CVE-2026-85887microsoft365_copilot+1EPSS score0.84%
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.CVE-2026-85885microsoft365_copilot+1EPSS score0.72%
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.CVE-2026-33102microsoft365_copilot+1EPSS score0.72%
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.CVE-2023-36565microsoft365_copilot+6EPSS score0.40%
Microsoft Office Graphics Elevation of Privilege VulnerabilityCVE-2023-23391microsoft365_copilot+1EPSS score0.64%
Office for Android Spoofing Vulnerability