9.9
Critique
CVE-2026-85885 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized…
Description
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft 365 Copilot | Versions non publiées |
Références
- Microsoft 365 Copilot Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft 365 Copilot
Les 14 CVE de Microsoft 365 Copilot →
CVE-2026-85887
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose…
7.7
Élevée
CVE-2026-50517
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network
9.9
Critique
CVE-2026-41106
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate…
9.3
Critique
CVE-2026-47645
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized…
8.8
Élevée