GCVE - cpe:2.3:a:microsoft:365_copilot_chat:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:365_copilot_chat:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	365 Copilot Chat (`2f679b90-dfc1-5ead-868f-412065a789ca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-26164`	vulnerable	2026-06-08 07:53:21.160637	M365 Copilot Information Disclosure Vulnerability HIGH (7.5) Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. Published: 2026-05-07T20:58:09.538Z Updated: 2026-06-19T16:13:13.674Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26164	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-26137`	vulnerable	2026-06-08 07:53:21.059947	Microsoft Exchange Elevation of Privilege Vulnerability CRITICAL (9.9) Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network. Published: 2026-03-19T21:06:26.050Z Updated: 2026-06-19T18:18:13.383Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26137	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-26129`	vulnerable	2026-06-08 07:53:20.992349	M365 Copilot Information Disclosure Vulnerability HIGH (7.5) Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. Published: 2026-05-07T20:58:24.050Z Updated: 2026-06-19T16:13:12.556Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26129	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59286`	vulnerable	2026-06-08 07:35:21.589200	Copilot Information Disclosure Vulnerability CRITICAL (9.3) Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network. Published: 2025-10-09T21:04:15.392Z Updated: 2026-02-26T17:47:51.165Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59286	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59272`	vulnerable	2026-06-08 07:35:21.496983	Copilot Information Disclosure Vulnerability CRITICAL (9.3) Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally. Published: 2025-10-09T21:04:14.254Z Updated: 2026-02-26T17:47:51.544Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59272	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-53787`	vulnerable	2026-06-08 07:31:15.466195	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-53774`	vulnerable	2026-06-08 07:31:15.345881	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.