Filtered by vendor Microsoft Subscriptions
Filtered by product 365 Copilot Android Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-48561 1 Microsoft 3 365 Copilot Android, 365 Copilot Ios, Edge Copilot 2026-07-26 9.6 Critical
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.
CVE-2026-41100 1 Microsoft 8 365 Copilot, 365 Copilot Android, 365 Copilot Android and 5 more 2026-06-09 4.4 Medium
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.