Microsoft 365 copilot
This hub aggregates every CVE we track for Microsoft 365 copilot, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.
23
CVEs tracked
11
Critical
6
High
0
In CISA KEV
Severity distribution
CRITICAL11HIGH6MEDIUM6
Monthly trend
0
0
0
0
0
0
0
0
1
0
2
0
2
0
0
1
0
2
1
5
5
2
0
2
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Microsoft 365 copilot.
- CVE-2026-85887M365 Copilot Information Disclosure Vulnerability7.7
- CVE-2026-85885Microsoft 365 Copilot Elevation of Privilege Vulnerability9.9
- CVE-2026-50517Microsoft M365 Copilot Remote Code Execution Vulnerability9.9
- CVE-2026-41106Microsoft 365 Copilot Elevation of Privilege Vulnerability9.3
- CVE-2026-47645Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability8.8
- CVE-2026-42895Microsoft Copilot Tampering Vulnerability6.5
- CVE-2026-54130M365 Copilot Information Disclosure Vulnerability9.8
- CVE-2026-45497Microsoft M365 Copilot Remote Code Execution Vulnerability7.7
- CVE-2026-42824M365 Copilot Information Disclosure Vulnerability6.5
- CVE-2026-41090Microsoft Copilot Tampering Vulnerability9.3
- CVE-2026-42827M365 Copilot Information Disclosure Vulnerability6.5
- CVE-2026-41100Microsoft 365 Copilot for Android Spoofing Vulnerability4.4
- CVE-2026-26129M365 Copilot Information Disclosure Vulnerability7.5
- CVE-2026-26164M365 Copilot Information Disclosure Vulnerability7.5
- CVE-2026-33102Microsoft 365 Copilot Elevation of Privilege Vulnerability9.3
Product normalization is registry-driven with AI assist and human review. How it works