8.0Hoch
Microsoft Office Graphics Elevation of Privilege Vulnerability
Microsoft Microsoft Office for Android
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
microsoft 365 copilot Schwachstellen (CVE)
Für microsoft 365 copilot veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
7.7Hoch
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
9.9Kritisch
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
9.9Kritisch
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
1.7%EPSS
8.1Hoch
M365 Copilot for iOS Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot for iOS
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
7.8Hoch
Windows GDI Elevation of Privilege Vulnerability
Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office for Android; Microsoft Microsoft Office LTSC for Mac 2021; Microsoft Microsoft Office LTSC for Mac 2024
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
9.6Kritisch
Microsoft Edge Copilot Remote Code Execution Vulnerability
Microsoft Microsoft Edge Copilot for Android; Microsoft Microsoft Edge Copilot for IOS
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.
9.3Kritisch
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
8.8Hoch
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
6.5Mittel
Microsoft Copilot Tampering Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
9.8Kritisch
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
1.1%EPSS
8.4Hoch
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4Hoch
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
4.7Mittel
Microsoft Office Information Disclosure Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office for Android
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.
8.4Hoch
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4Hoch
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
7.7Hoch
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.
6.5Mittel
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.6%EPSS
9.3Kritisch
Microsoft Copilot Tampering Vulnerability
Microsoft Microsoft 365 Copilot for iOS
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
6.5Mittel
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.8Hoch
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft Office for Android; Microsoft Microsoft Office LTSC for Mac 2021; Microsoft Microsoft Office LTSC for Mac 2024
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
6.2Mittel
M365 Copilot for Desktop Spoofing Vulnerability
Microsoft M365 Copilot for Desktop
Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.
4.4Mittel
Microsoft 365 Copilot for Android Spoofing Vulnerability
Microsoft Microsoft 365 Copilot for Android; Microsoft Microsoft Excel for Android; Microsoft Microsoft Loop for Android; Microsoft Microsoft OneNote for Android
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
8.4Hoch
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office for Android
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
9.3Kritisch
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.