Microsoft Outlook Copilot Arbitrary Command Execution

The vulnerability of the intelligent virtual assistant for Microsoft Outlook Copilot is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2026-55145

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-55145 Outlook Copilot Tampering Vulnerability

...

CVE-2026-55145 Outlook Copilot Tampering Vulnerability

...

EUVD-2026-44226

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-55145

The CVE-2026-55145 entry concerns Outlook Copilot and describes improper neutralization of special elements used in a command (command injection) that could allow an authorized attacker to tamper over a network. Connected sources corroborate with MSRC and NVD summaries and indicate exploitation s...

Outlook Copilot Tampering Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-55145: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

KLA91149 Multiple vulnerabilities in Microsoft Copilot Plugin

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in GitHub Copilot...

PT-2026-58586

Name of the Vulnerable Software and Affected Versions Microsoft Outlook Copilot affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, occurs in Outlook Copilot. This issue allows an authorized remote attacker to...