1215 matches found
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
M365 Copilot Information Disclosure Vulnerability
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network...
Microsoft Copilot Information Disclosure Vulnerability
Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
PT-2026-95165
Name of the Vulnerable Software and Affected Versions Microsoft Copilot affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to disclose information over a network. Command injection ...
CVE-2026-85885: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
CVE-2026-78501: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
CVE-2026-55946: Improper Neutralization of Special Elements used in a Command
Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
PT-2026-95174
Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to elevate privileges over a network. Recommendations At the...
KLA91296 Multiple vulnerability in Microsoft Other
Multiple vulnerability was found in Microsoft Other. Malicious users can exploit this vulnerability to bypass security restrictions, obtain sensitive information. Original advisories CVE-2026-55946 Exploitation Related products Microsoft-Copilot-Studio CVE list CVE-2026-55946 unknown Solution...
KLA91291 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft 365 Copilot...
PT-2026-95184
Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description Incorrect permission assignment for a critical resource allows an authorized attacker to disclose information over a network. Recommendations At the moment, there is no information about...
PT-2026-95172
Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot affected versions not specified Description Microsoft 365 Copilot's Business Chat contains a command injection flaw, which occurs when special elements used in a command are not properly neutralized. This allows an...
copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-91938 via flowise-components (>=1.3.4, <=1.8.6)
flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-91938 Source advisory: MEND:CVE-2026-91938...
copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-91935 via flowise-components (>=1.3.4, <=1.8.6)
flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-91935 Source advisory: MEND:CVE-2026-91935...
copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-91934 via flowise-components (>=1.3.4, <=1.8.6)
flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-91934 Source advisory: MEND:CVE-2026-91934...
memory-poisoning-axis
memory-poisoning-axis Deterministic memory-poisoning / prompt-injection measurement — anchored to CVE-2026-24301 "CoSnitch" Microsoft Copilot Personal, CVSS 3.1 8.8, patched 18 Aug 2026. CoSnitch chained: i automatic prompt execution ?q= + undocumented ?autorun=1, ii data exfiltration via...
Microsoft Copilot Studio Graphical Tool Privilege Escalation
The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...
CVE-2026-81381
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
