899 matches found
CVE-2025-59286
CVE-2025-59286 is identified across multiple sources as a Copilot Spoofing/Information Disclosure vulnerability related to Microsoft 365 Copilot Business Chat. The NVD entry describes command-injection related information disclosure, while CNVD/CNNVD and other feeds label it as a Copilot spoofing...
CVE-2025-59286 Copilot Information Disclosure Vulnerability
...
CVE-2025-59286 Copilot Information Disclosure Vulnerability
...
CVE-2025-59272
CVE-2025-59272 : Affects Microsoft 365 Copilot Business Chat. Described as a spoofing/command-injection vulnerability caused by improper neutralization of special elements in Copilot, enabling an unauthorized attacker to perform local information disclosure. Root cause: improper input handling in...
CVE-2025-59272 Copilot Information Disclosure Vulnerability
...
CVE-2025-59272 Copilot Information Disclosure Vulnerability
...
CVE-2025-59252
CVE-2025-59252 — M365 Copilot Information Disclosure Affected product: Microsoft 365 Copilot (Copilot/spoofing context referenced across sources). Root cause: Improper neutralization of special elements used in a command (command injection) in Copilot, enabling an unauthorized attacker to disclos...
CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability
...
CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability
...
copilot-studio-datainsight (>=0.0.1 <=0.0.6), flowise (>=1.6.1 <=2.2.8) potentially affected by CVE-2025-61913 via flowise-components (>=1.3.4 <=2.2.8)
flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =2.2.8 Source cves: CVE-2025-61913 Source advisory: OSV:GHSA-JV9M-VF54-CHJJ...
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to perform information disclosure locally...
PT-2025-41487
Name of the Vulnerable Software and Affected Versions Copilot affected versions not specified Description A spoofing issue exists in Copilot. This allows for potential misrepresentation or impersonation within the Copilot environment. Recommendations At the moment, there is no information about a...
PT-2025-41484
Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot affected versions not specified Description A spoofing issue exists in Microsoft 365 Copilot. The vulnerability allows for potential misrepresentation of Copilot’s responses, potentially leading to user confusion or...
Microsoft 365 Word Copilot 命令注入漏洞
Microsoft 365 Word Copilot is an AI assistant from Microsoft Corporation, USA. Microsoft 365 Word Copilot has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...
Microsoft 365 Copilot Business Chat 命令注入漏洞
Microsoft 365 Copilot Business Chat is an AI chat software from Microsoft Corporation, USA. Microsoft 365 Copilot Business Chat has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...
PT-2025-41486
Name of the Vulnerable Software and Affected Versions Copilot affected versions not specified Description A spoofing issue exists within Copilot. The vulnerability allows for potential manipulation of Copilot’s responses. Recommendations At the moment, there is no information about a newer versio...
Microsoft 365 Copilot Business Chat 命令注入漏洞
Microsoft 365 Copilot Business Chat is an AI chat software from Microsoft Corporation, USA. Microsoft 365 Copilot Business Chat has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...
