Microsoft 365 Copilot
2 known vulnerabilities in Microsoft 365 Copilot, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-85887 CVSS 7.7 high Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
- CVE-2026-85885 CVSS 8.8 high Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to…