Microsoft 365 copilot
This hub aggregates every CVE we track for Microsoft 365 copilot, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.
19
CVEs tracked
8
Critical
5
High
0
In CISA KEV
Severity distribution
CRITICAL8MEDIUM6HIGH5
Monthly trend
0
0
0
0
0
0
0
0
0
0
1
0
2
0
2
0
0
1
0
2
1
5
5
0
2024-082026-07
Latest CVEs
The 15 most recently published vulnerabilities affecting Microsoft 365 copilot.
- CVE-2026-47645Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability8.8
- CVE-2026-42895Microsoft Copilot Tampering Vulnerability6.5
- CVE-2026-54130M365 Copilot Information Disclosure Vulnerability9.8
- CVE-2026-45497Microsoft M365 Copilot Remote Code Execution Vulnerability7.7
- CVE-2026-42824M365 Copilot Information Disclosure Vulnerability6.5
- CVE-2026-41090Microsoft Copilot Tampering Vulnerability9.3
- CVE-2026-42827M365 Copilot Information Disclosure Vulnerability6.5
- CVE-2026-41100Microsoft 365 Copilot for Android Spoofing Vulnerability4.4
- CVE-2026-26129M365 Copilot Information Disclosure Vulnerability7.5
- CVE-2026-26164M365 Copilot Information Disclosure Vulnerability7.5
- CVE-2026-33102Microsoft 365 Copilot Elevation of Privilege Vulnerability9.3
- CVE-2026-26137Microsoft Exchange Elevation of Privilege Vulnerability9.9
- CVE-2026-24299M365 Copilot Information Disclosure Vulnerability5.3
- CVE-2026-24307M365 Copilot Information Disclosure Vulnerability9.3
- CVE-2025-59286Copilot Information Disclosure Vulnerability9.3
Product normalization is registry-driven with AI assist and human review. How it works