Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft. In his proof of concept, the internally generated fi...

CVE-2026-21521 Word Copilot Information Disclosure Vulnerability

...

CVE-2026-21521 Word Copilot Information Disclosure Vulnerability

...

CVE-2026-21521

CVE-2026-21521 affects Copilot and corresponds to an information-disclosure vulnerability caused by improper neutralization of escape, meta, or control sequences. The Red Hat, NVD, Microsoft, EUVD, and other sources consistently describe an unauthorized attacker disclosing information over a netw...

Word Copilot Information Disclosure Vulnerability

Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network...

Microsoft 365 Word Copilot security vulnerabilities

Microsoft 365 Word Copilot is an AI assistant developed by the American company Microsoft. There is a security vulnerability in Microsoft 365 Word Copilot, which stems from improper handling of escaped sequences, meta-sequences, or control sequences. Attackers can exploit this vulnerability to le...

KLA90856 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Word Copilot can be...

Microsoft 365 Word Copilot Spoofing Vulnerability

Microsoft 365 Word Copilot is an AI assistant from Microsoft Corporation, USA. Microsoft 365 Word Copilot has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...

Microsoft 365 Word Copilot 命令注入漏洞

Microsoft 365 Word Copilot is an AI assistant from Microsoft Corporation, USA. Microsoft 365 Word Copilot has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...