The vulnerability of the Business Chat function in the Microsoft 365 Copilot intelligent virtual assistant allows a hacker to escalate their privileges.

The vulnerability of the Business Chat function in Microsoft 365 Copilot is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

CVE-2026-26137

Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...