Microsoft 365 Copilot
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:microsoft_365_copilot:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Microsoft 365 Copilot (92189483-ff44-5731-847f-37f8f9d01c6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-85887 |
vulnerable | 2026-10-13 12:28:54.133165 |
M365 Copilot Information Disclosure Vulnerability
HIGH (7.7)
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Published: 2026-09-17T23:04:48.423Z
Updated: 2026-11-10T21:38:39.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-85885 |
vulnerable | 2026-10-13 12:28:53.887379 |
Microsoft 365 Copilot Elevation of Privilege Vulnerability
CRITICAL (9.9)
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
Published: 2026-09-17T22:55:55.696Z
Updated: 2026-11-10T21:29:14.583Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54130 |
vulnerable | 2026-07-29 01:00:27.587589 |
M365 Copilot Information Disclosure Vulnerability
CRITICAL (9.8)
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Published: 2026-06-18T21:42:39.358Z
Updated: 2026-11-10T23:23:27.766Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50517 |
vulnerable | 2026-07-29 00:57:48.538552 |
Microsoft M365 Copilot Remote Code Execution Vulnerability
CRITICAL (9.9)
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Published: 2026-07-24T00:01:11.819Z
Updated: 2026-11-10T22:41:07.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47645 |
vulnerable | 2026-07-29 00:55:00.296325 |
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
HIGH (8.8)
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-06-19T20:29:42.232Z
Updated: 2026-11-10T23:25:20.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42895 |
vulnerable | 2026-07-29 00:52:12.497755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41106 |
vulnerable | 2026-07-29 00:49:30.981931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45497 |
vulnerable | 2026-06-08 08:05:11.774691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42827 |
vulnerable | 2026-06-08 08:03:16.758238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42824 |
vulnerable | 2026-06-08 08:03:16.723938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33102 |
vulnerable | 2026-06-08 07:57:18.626888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24307 |
vulnerable | 2026-06-08 07:51:17.463120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24299 |
vulnerable | 2026-06-08 07:51:17.447503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32711 |
vulnerable | 2026-06-08 07:19:00.545247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.