123 matches found
cve-2025-32711
CVE-2025-32711 EchoLeak Инструмент обнаружения 🔐 Обзор CVE-2025-32711, получившая название «EchoLeak», представляет собой критическую уязвимость нулевого клика в Microsoft 365 Copilot, позволяющую злоумышленникам извлекать конфиденциальные корпоративные данные без какого-либо взаимодействия с...
aisecplus-week01-danielossai
🔐 AISec Plus — 1주차: 위협 매핑 연구자: Daniel Ossai 저장소: aisecplus-week01-danielossai 제출: 1주차 · AISec Plus 부트캠프 📌 인시던트 이름 및 날짜 EchoLeak CVE-2025-32711 발견: 2025년 1월 · 공개: 2025년 6월 · 패치: 2025년 6월 📝 무슨 일이 있었나 Aim Security의 연구원들은 Microsoft 365 Copilot에서 치명적인 zero-click 간접 프롬프트 인젝션 취약점을 발견했습니다. 사용자 상호작용 없이 단...
EUVD-2026-48457
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
...
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
...
CVE-2026-50517
CVE-2026-50517 describes a deserialization vulnerability in Microsoft 365 Copilot (M365 Copilot) that enables an authorized attacker to execute code over the network. The issue is triggered by deserializing untrusted data, with a critical CVSS v3.1 score (9.9, CRITICAL) and a network attack vecto...
PT-2026-64203
Name of the Vulnerable Software and Affected Versions Microsoft M365 Copilot affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object,...
CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability
...
EUVD-2026-41445
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-41106
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-41106
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-41106
Technical details for CVE-2026-41106 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.
CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability
...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
KLA91128 PE vulnerability in Microsoft Apps
Privilege escalation vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-41106 Exploitation Related products Microsoft-365 CVE list CVE-2026-41106 unknown Solution Install necessary updates from the KB section,...
PT-2026-55318
Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description M365 Copilot contains an open redirect issue, which occurs when an application redirects users to an untrusted external site. This flaw allows an unauthorized attacker to elevate...
Microsoft 365 Copilot Command Injection Vulnerability (CNVD-2026-26512)
Microsoft 365 Copilot is an AI assistant integrated into the Microsoft 365 office suite. It offers features such as intelligent writing, data analysis, and content generation. Microsoft 365 Copilot has a command injection vulnerability. This vulnerability arises from the failure to properly...
CVE-2026-47645
Summary: CVE-2026-47645 is an open redirect vulnerability in Microsoft 365 Copilot’s Business Chat that can lead to privilege escalation over a network. The issue is described across sources (NVD/MSRC/CVE records) as a url redirection to an untrusted site, with a CVSS v3.1 base score of 8.8 (HIGH...