144 matches found
cve-2025-32711
CVE-2025-32711 EchoLeak Detection Tool 🔐 Overview CVE-2025-32711, nicknamed "EchoLeak," is a critical zero-click vulnerability in Microsoft 365 Copilot that allowed attackers to exfiltrate sensitive organizational data without any user interaction. This repository contains detection and remediati...
aisecplus-week01-danielossai
🔐 AISec Plus — 第1週: 脅威をマッピングする 研究者: Daniel Ossai Repo: aisecplus-week01-danielossai 提出: 第1週 · AISec Plus ブートキャンプ 📌 インシデント名と日付 EchoLeak CVE-2025-32711 発見: 2025年1月 · 開示: 2025年6月 · 修正: 2025年6月 📝 何が起こったか Aim Securityの研究者らは、Microsoft 365...
EUVD-2026-82590
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
CVE-2026-78501
CVE-2026-78501 is a command injection vulnerability in Microsoft 365 Copilot's Business Chat , caused by improper neutralization of special elements used in a command. An unauthorized attacker can exploit it over a network to disclose information . The CVSS v3.1 score is 7.4 (HIGH) , with a vecto...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
KLA91291 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft 365 Copilot...
CVE-2026-78501: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
...
EUVD-2026-48457
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
...
CVE-2026-50517
CVE-2026-50517 describes a deserialization vulnerability in Microsoft 365 Copilot (M365 Copilot) that enables an authorized attacker to execute code over the network. The issue is triggered by deserializing untrusted data, with a critical CVSS v3.1 score (9.9, CRITICAL) and a network attack vecto...
PT-2026-64203
Name of the Vulnerable Software and Affected Versions Microsoft M365 Copilot affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object,...
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant involves redirecting URLs to unreliable websites, allowing attackers to escalate their privileges.
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in iOS operating systems, related to access control deficiencies, allows attackers to escalate their privileges.
The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in iOS operating systems is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability
...
PT-2026-58663
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-58617: Improper Access Control
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...
