What’s Vulnerable › Products

Microsoft 365 Copilot vulnerabilities

54 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 38 published in the last 12 months.

Check whether your Microsoft 365 Copilot version is affected

Latest Microsoft 365 Copilot vulnerabilities

• CVE-2026-85887 — M365 Copilot Information Disclosure Vulnerability (CVSS 7.7)
• CVE-2026-85885 — Microsoft 365 Copilot Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-50517 — Microsoft M365 Copilot Remote Code Execution Vulnerability (CVSS 9.9)
• CVE-2026-58617 — M365 Copilot for iOS Elevation of Privilege Vulnerability (CVSS 9.8)
• CVE-2026-50387 — Windows GDI Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-48561 — Microsoft Edge Copilot Remote Code Execution Vulnerability (CVSS 9.6)
• CVE-2026-41106 — Microsoft 365 Copilot Elevation of Privilege Vulnerability (CVSS 9.3)
• CVE-2026-47645 — Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-42895 — Microsoft Copilot Tampering Vulnerability (CVSS 7.5)
• CVE-2026-54130 — M365 Copilot Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2026-45474 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4)
• CVE-2026-45472 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4)
• CVE-2026-45463 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4)
• CVE-2026-45461 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4)
• CVE-2026-45460 — Microsoft Office Information Disclosure Vulnerability (CVSS 4.7)
• CVE-2026-42827 — M365 Copilot Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2026-41090 — Microsoft Copilot Tampering Vulnerability (CVSS 9.3)
• CVE-2026-42831 — Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8)
• CVE-2026-41614 — M365 Copilot for Desktop Spoofing Vulnerability (CVSS 6.2)
• CVE-2026-41100 — Microsoft 365 Copilot for Android Spoofing Vulnerability (CVSS 4.4)
• CVE-2026-40363 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.4)
• CVE-2026-33102 — Microsoft 365 Copilot Elevation of Privilege Vulnerability (CVSS 9.3)
• CVE-2026-24299 — M365 Copilot Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2026-26133 — M365 Copilot Information Disclosure Vulnerability (CVSS 7.1)
• CVE-2026-26134 — Microsoft Office Elevation of Privilege Vulnerability (CVSS 7.8)