146259 matches found
CVE-2026-26136 Microsoft Copilot Information Disclosure Vulnerability
...
CVE-2026-26136
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26136 Microsoft Copilot Information Disclosure Vulnerability
...
CVE-2026-26136
CVE-2026-26136 is a command injection vulnerability in Microsoft Copilot caused by improper neutralization of special elements in commands. The issue enables an unauthenticated attacker to disclose information over the network. Affected product: Microsoft Copilot (including Copilot components ref...
CVE-2026-24299 M365 Copilot Information Disclosure Vulnerability
...
CVE-2026-24299
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-24299 M365 Copilot Information Disclosure Vulnerability
...
CVE-2026-24299
CVE-2026-24299 affects M365 Copilot. The vulnerability is an improper neutralization of special elements used in a command (command injection) that could allow an unauthenticated attacker to disclose information over a network. According to the connected MSRC entry, the exploit would be delivered...
CVE-2026-23658 Azure DevOps: msazure Elevation of Privilege Vulnerability
...
CVE-2026-26120
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-26120 Microsoft Bing Tampering Vulnerability
...
CVE-2026-26120 Microsoft Bing Tampering Vulnerability
...
CVE-2026-26120
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...
CVE-2026-32191 Microsoft Bing Images Remote Code Execution Vulnerability
...
CVE-2026-32191
Consolidated details for CVE-2026-32191 from connected records indicate Microsoft Bing Images suffers a remote code execution vulnerability due to improper neutralization of special elements used in an OS command (OS command injection). The issue allows an attacker who can reach Bing Images over ...
CVE-2026-26138
CVE-2026-26138 describes a server-side request forgery (SSRF) in Microsoft Purview that enables an attacker to achieve a network-based privilege elevation. The connected sources confirm the vulnerable product (Microsoft Purview) and the impact (privilege escalation) via SSRF, but do not provide g...
CVE-2026-26138 Microsoft Purview Elevation of Privilege Vulnerability
...
CVE-2026-26139 Microsoft Purview Elevation of Privilege Vulnerability
...