EUVD-2026-13186

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-13180

Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...

EUVD-2026-13184

Server-side request forgery ssrf in Microsoft 365 Copilot's Business Chat allows an authorized attacker to elevate privileges over a network...

CVE-2026-32194 Microsoft Bing Images Remote Code Execution Vulnerability

...

CVE-2026-32194

CVE-2026-32194 affects Microsoft Bing Images and is described as an instance of improper neutralization of command elements leading to remote code execution. The connected sources consistently identify command injection as the root cause affecting Microsoft Bing Images, with high-severity impact ...

CVE-2026-32194 Microsoft Bing Images Remote Code Execution Vulnerability

...

CVE-2026-32191

Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...

CVE-2026-26139

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-26138

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-26137

Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...

CVE-2026-26136

Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2026-26120

Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...

CVE-2026-24299

Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2026-26137 Microsoft Exchange Elevation of Privilege Vulnerability

...

CVE-2026-26137 Microsoft Exchange Elevation of Privilege Vulnerability

...

CVE-2026-26137

CVE-2026-26137 is described as a server-side request forgery (SSRF) that affects Microsoft Exchange (and related Microsoft 365 Copilot/Business Chat contexts in linked sources). The available documents state that an authorized attacker can elevate privileges over a network, with the CVSS 3.1 scor...

CVE-2026-26136 Microsoft Copilot Information Disclosure Vulnerability

...

CVE-2026-26136

Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2026-26136 Microsoft Copilot Information Disclosure Vulnerability

...

CVE-2026-26136

CVE-2026-26136 is a command injection vulnerability in Microsoft Copilot caused by improper neutralization of special elements in commands. The issue enables an unauthenticated attacker to disclose information over the network. Affected product: Microsoft Copilot (including Copilot components ref...