7.4
High
CVE-2026-42893 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…
Description
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Outlook for iOS 1.0 | 1.0.0 → < 5.2617.1 | 5.2617.1 |