Veille CVE

Recherche « Microsoft copilot chat »

11 CVE

Critique 1 Élevée 8 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft copilot chat » ✕
  1. CVE-2026-78501 8.6 Élevée

    Microsoft 365 Copilot's Business Chat · Microsoft 365 copilot chat

    Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.

  2. CVE-2026-58616 3.0 Faible

    Microsoft Edge (Chromium-based) · Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux

    Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.

  3. CVE-2026-65675 6.5 Moyenne

    Microsoft Visual Studio Code CoPilot Chat Extension · Microsoft github copilot chat

    No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

  4. CVE-2026-48561 9.6 Critique

    Microsoft Edge Copilot for Android · Microsoft Edge Copilot for IOS · Microsoft 365 copilot

    Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-50519 7.5 Élevée

    Microsoft GitHub Copilot Chat

    Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  6. CVE-2026-47645 8.8 Élevée

    Microsoft 365 Copilot

    Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.

  7. CVE-2026-45482 8.4 Élevée

    Microsoft Visual Studio Code CoPilot Chat Extension · Microsoft visual studio code

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  8. CVE-2026-47644 7.5 Élevée

    Microsoft Copilot Chat (Microsoft Edge) · Microsoft copilot chat

    Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

  9. CVE-2026-33111 7.5 Élevée

    Microsoft Copilot Chat (Microsoft Edge) · Microsoft copilot chat

    Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

  10. CVE-2026-26164 7.5 Élevée

    Microsoft 365 Copilot's Business Chat · Microsoft 365 copilot chat

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

  11. CVE-2026-26129 7.5 Élevée

    Microsoft 365 Copilot's Business Chat · Microsoft 365 copilot chat

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.