2981 matches found
CVE-2026-26164 M365 Copilot Information Disclosure Vulnerability
...
Azure AI Foundry Elevation of Privilege Vulnerability
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network...
Microsoft Dynamics 365 Customer Insights 安全漏洞
Microsoft Dynamics 365 Customer Insights is a customer data platform developed by Microsoft for enterprise customers, focusing on data integration, user profiling analysis, and marketing insights. There is a security vulnerability in Microsoft Dynamics 365 Customer Insights, which stems from...
KLA91032 OSI vulnerabilities in Microsoft Apps
An information disclosure vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-26129 CVE-2026-26164 Exploitation Related products Microsoft-365 CVE list...
PT-2026-38574
Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description Improper neutralization of special elements in Copilot Business Chat allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no...
Microsoft 365 Copilot Business Chat 安全漏洞
Microsoft 365 Copilot Business Chat is an AI chat software developed by Microsoft Corporation in the United States. There is a security vulnerability in Microsoft 365 Copilot Business Chat, which stems from improper neutralization of special elements. This vulnerability could allow unauthorized...
Microsoft 365 Copilot BizChat 注入漏洞
Microsoft 365 Copilot BizChat is an AI chat software developed by Microsoft Corporation. There is a vulnerability in Microsoft 365 Copilot BizChat, which stems from improper neutralization of special elements in the output of downstream components. This vulnerability could allow unauthorized...
Meet Wiz for M365: Bringing SaaS into the Security Graph
Secure Microsoft 365 and the cloud it powers — one platform, one graph, complete context...
Microsoft Agent 365, now generally available, expands capabilities and integrations
Microsoft Agent 365 Now generally available for commercial customers. Connect with your Microsoft 365 expert Choose an ecosystem partner for agent security and governance AI agents aren’t coming—they’re already in your environment. They show up in places you expect like Microsoft Copilot, Microso...
What’s new, updated, or recently released in Microsoft Security
New capabilities in Microsoft Agent 365; new Microsoft Defender and GitHub integration At Microsoft, security innovations are purpose-built to help every organization protect end-to-end with the speed and scale of AI. Our vision is simple: security should be ambient and autonomous, just like the ...
What’s new, updated, or recently released in Microsoft Security
New capabilities in Microsoft Agent 365; new Microsoft Defender and GitHub integration At Microsoft, security innovations are purpose-built to help every organization protect end-to-end with the speed and scale of AI. Our vision is simple: security should be ambient and autonomous, just like the ...
CVE-2026-33102
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-32210
Server-side request forgery ssrf in Microsoft Dynamics 365 Online allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-33102
Technical details of CVE-2026-33102 are not publicly available in the provided documents; monitor for updates from official sources.
CVE-2026-33102
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability
...
CVE-2026-32210
Technical details are not publicly available in the provided documents for CVE-2026-32210. Monitor for updates.