Skip to content
fr Sign in
4.4 Medium

CVE-2026-41100 Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally

Description

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

Affected products and versions

Product Affected versions Fixed in
Microsoft 365 Copilot for Android 1.0 1.0 → < 16.0.19822.20190 16.0.19822.20190
Microsoft Excel for Android 16.0 16.0.0.0 → < 16.0.19822.20190 16.0.19822.20190
Microsoft Loop for Android 1.0 1.0.0 → < 16.0.19822.20190 16.0.19822.20190
Microsoft OneNote for Android 16.0 16.0.1 → < 16.0.19822.20190 16.0.19822.20190
Microsoft PowerPoint for Android 16.0 16.0.0.0 → < 16.0.19822.20190 16.0.19822.20190
Microsoft Word for Android 16.0 16.0.0.0 → < 16.0.19822.20190 16.0.19822.20190

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft 365 Copilot for Android

The 3 CVEs of Microsoft 365 Copilot for Android →
CVE-2026-48561 Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge)… 9.6 Critical CVE-2026-26133 AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network 7.1 High
Track this CVE