Skip to content
fr Sign in
7.4 High

CVE-2026-42893 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an…

Description

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft Outlook for iOS 1.0 1.0.0 → < 5.2617.1 5.2617.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft Outlook for iOS

The 2 CVEs of Microsoft Outlook for iOS →
CVE-2026-26133 AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network 7.1 High
Track this CVE