816 matches found
CVE-2025-53787
CVE-2025-53787 concerns Microsoft 365 Copilot BizChat Information Disclosure Vulnerability. Affected component is Microsoft 365 Copilot BizChat; root cause and specifics vary across sources. Public references list this CVE as enabling information disclosure with high impact to confidentiality, wi...
CVE-2025-53774 Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
...
CVE-2025-53774 Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
...
CVE-2025-53774
CVE-2025-53774 is associated with Microsoft 365 Copilot BizChat Information Disclosure. Connected documents largely reiterate the affected product (BizChat) and vulnerability context, but do not provide explicit technical specifics (affected versions, root cause, exploitation details, or fixes) w...
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
...
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
...
PT-2025-32315 · Microsoft · M365 Copilot
Name of the Vulnerable Software and Affected Versions: Microsoft 365 Copilot affected versions not specified Description: This issue involves information disclosure within the Microsoft 365 Copilot BizChat feature. Recommendations: At the moment, there is no information about a newer version that...
Microsoft 365 Copilot BizChat 命令注入漏洞
Microsoft 365 Copilot BizChat is an AI chat software from Microsoft Corporation USA. A command injection vulnerability exists in Microsoft 365 Copilot BizChat. The vulnerability stems from improper neutralization of special elements used in commands. An attacker can exploit the vulnerability to...
KLA86377 OSI vulnerabilities in Microsoft Apps
Information disclosure vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerability to obtain sensitive information. Original advisories CVE-2025-53774 CVE-2025-53787 Related products Microsoft-Dynamics-365 CVE list CVE-2025-53774 critical CVE-2025-53787 critical ...
PT-2025-32314
Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot affected versions not specified Description This issue involves an information disclosure within the Microsoft 365 Copilot BizChat feature. Recommendations At the moment, there is no information about a newer version that...
Hackers Abuse Microsoft 365 Direct Send to Deliver Internal Phishing Emails
A new Proofpoint report reveals how attackers are using Microsoft 365's Direct Send and unsecured SMTP relays to…...
Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts
Cybersecurity researchers have detailed a new cluster of activity where threat actors are impersonating enterprises with fake Microsoft OAuth applications to facilitate credential harvesting as part of account takeover attacks. "The fake Microsoft 365 applications impersonate various companies,...
Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials
Cybersecurity researchers have disclosed details of a new phishing campaign that conceals malicious payloads by abusing link wrapping services from Proofpoint and Intermedia to bypass defenses. "Link wrapping is designed by vendors like Proofpoint to protect users by routing all clicked URLs...
Customer guidance for SharePoint vulnerability CVE-2025-53770
Revision Change Date 1.0 Information published 07/19/25 2.0 Clarified affected SharePoint product in summary 07/20/25 Added fix availability guidance Provided additional protections guidance regarding: Upgrade SharePoint products to supported versions if required Install July 2025 Security Update...
The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise applications relates to reading beyond the buffer limit in memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise applications is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Preventing Zero-Click AI Threats: Insights from EchoLeak
A zero-click exploit called EchoLeak reveals how AI assistants like Microsoft 365 Copilot can be manipulated to leak sensitive data without user interaction. This entry breaks down how the attack works, why it matters, and what defenses are available to proactively mitigate this emerging AI-nativ...
The vulnerability of the Microsoft 365 Apps for Enterprise package, related to the use of cryptographic algorithms containing defects, allows a hacker to circumvent security restrictions.
The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office lies in the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...