7.7Hoch
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Microsoft Microsoft 365 Copilot Schwachstellen (CVE)
Für Microsoft Microsoft 365 Copilot veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
9.9Kritisch
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
9.9Kritisch
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
1.7%EPSS
9.3Kritisch
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
8.8Hoch
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
6.5Mittel
Microsoft Copilot Tampering Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
9.8Kritisch
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
1.1%EPSS
7.7Hoch
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.
6.5Mittel
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.6%EPSS
6.5Mittel
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
9.3Kritisch
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
5.3Mittel
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
9.3Kritisch
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.
9.3Kritisch
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.2%EPSS