Recherche « Microsoft 365 copilot chat »
5 CVE
-
CVE-2026-78501 8.6 Élevée
Microsoft 365 Copilot's Business Chat · Microsoft 365 copilot chat
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-48561 9.6 Critique
Microsoft Edge Copilot for Android · Microsoft Edge Copilot for IOS · Microsoft 365 copilot
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.
-
CVE-2026-47645 8.8 Élevée
Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
-
CVE-2026-26164 7.5 Élevée
Microsoft 365 Copilot's Business Chat · Microsoft 365 copilot chat
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-26129 7.5 Élevée
Microsoft 365 Copilot's Business Chat · Microsoft 365 copilot chat
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.