CVE-2026-55145

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-55145 Outlook Copilot Tampering Vulnerability

...

CVE-2026-55145

The CVE-2026-55145 entry concerns Outlook Copilot and describes improper neutralization of special elements used in a command (command injection) that could allow an authorized attacker to tamper over a network. Connected sources corroborate with MSRC and NVD summaries and indicate exploitation s...

CVE-2026-55145 Outlook Copilot Tampering Vulnerability

...

Outlook Copilot Tampering Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

KLA91149 Multiple vulnerabilities in Microsoft Copilot Plugin

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in GitHub Copilot...