Microsoft 365 Copilot
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:microsoft_365_copilot:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Microsoft 365 Copilot (92189483-ff44-5731-847f-37f8f9d01c6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-54130 |
vulnerable | 2026-07-29 01:00:27.587589 |
M365 Copilot Information Disclosure Vulnerability
CRITICAL (9.8)
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Published: 2026-06-18T21:42:39.358Z
Updated: 2026-08-25T22:42:56.684Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50517 |
vulnerable | 2026-07-29 00:57:48.538552 |
Microsoft M365 Copilot Remote Code Execution Vulnerability
CRITICAL (9.9)
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Published: 2026-07-24T00:01:11.819Z
Updated: 2026-09-17T22:34:31.553Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47645 |
vulnerable | 2026-07-29 00:55:00.296325 |
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
HIGH (8.8)
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-06-19T20:29:42.232Z
Updated: 2026-08-25T22:44:50.971Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42895 |
vulnerable | 2026-07-29 00:52:12.497755 |
Microsoft Copilot Tampering Vulnerability
MEDIUM (6.5)
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
Published: 2026-06-19T20:27:46.785Z
Updated: 2026-08-25T22:42:56.106Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41106 |
vulnerable | 2026-07-29 00:49:30.981931 |
Microsoft 365 Copilot Elevation of Privilege Vulnerability
CRITICAL (9.3)
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-07-02T22:18:57.629Z
Updated: 2026-09-17T22:28:23.104Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45497 |
vulnerable | 2026-06-08 08:05:11.774691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42827 |
vulnerable | 2026-06-08 08:03:16.758238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-42824 |
vulnerable | 2026-06-08 08:03:16.723938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33102 |
vulnerable | 2026-06-08 07:57:18.626888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24307 |
vulnerable | 2026-06-08 07:51:17.463120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24299 |
vulnerable | 2026-06-08 07:51:17.447503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32711 |
vulnerable | 2026-06-08 07:19:00.545247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.