IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.1Alta

CVE-2026-26133M365 Copilot Information Disclosure Vulnerability

Microsoft Microsoft 365 Copilot for Android; Microsoft Microsoft 365 Copilot for iOS; Microsoft Microsoft Edge for Android; Microsoft Microsoft Edge for iOS Publicada: (hace 8 meses)

Descripción

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Debilidad (CWE): CWE-77

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
microsoft 365 copilot < 2.107.2
microsoft 365 copilot Android 1.0 – < 16.0.19815.10000
microsoft 365 copilot iOS 1.0 – < 2.107.2
microsoft edge 1.0.0 – < 145.3800.99
microsoft excel 16.0.0.0 – < 16.0.19822.20038
microsoft loop 2.0.0 – < 2.106.26020617
Microsoft Microsoft 365 Copilot for Android 1.0 – < 16.0.19815.10000
Microsoft Microsoft 365 Copilot for iOS 1.0 – < 2.107.2
Microsoft Microsoft Edge for Android 1.0.0 – < 145.3800.99
Microsoft Microsoft Edge for iOS 1.0.0.0 – < 145.3800.99
Microsoft Microsoft Excel for Android 16.0.0.0 – < 16.0.19822.20038
Microsoft Microsoft Excel for iOS 1.0 – < 2.106.26020617
Microsoft Microsoft Loop for iOS 2.0.0 – < 2.106.26020617
Microsoft Microsoft OneNote 1.0.0 – < 2.106.26020617
Microsoft Microsoft OneNote for Android 16.0.1 – < 16.0.19725.20142
Microsoft Microsoft Outlook for Android 1.0 – < 5.2605
Microsoft Microsoft Outlook for iOS 1.0.0 – < 5.2605
Microsoft Microsoft Outlook for Mac 1.0.0 – < 5.2605
Microsoft Microsoft PowerBI for Android 2.0.0 – < 2.2.260210.21290750
Microsoft Microsoft PowerBI for iOS 1.0.0 – < 1.2.260302.2193910
Microsoft Microsoft PowerPoint for Android 16.0.0.0 – < 16.0.19822.20038
Microsoft Microsoft PowerPoint for iOS 1.0 – < 2.106.26020617
Microsoft Microsoft Teams for Android 1.0.0 – < 1.0.0.2026043102
Microsoft Microsoft Teams for iOS 2.0.0 – < 8.3.1
Microsoft Microsoft Word for Android 16.0.0.0 – < 16.0.19822.20038
Microsoft Microsoft Word for iOS 2.0.0 – < 2.106.26020617
microsoft onenote < 16.0.19725.20142
microsoft onenote for android 16.0.1 – < 16.0.19725.20142
microsoft onenote for ios 1.0.0 – < 2.106.26020617
microsoft outlook 1.0.0 – < 5.2605
microsoft outlook 2016 1.0 – < 5.2605
microsoft power bi < 2.2.260210.21290750
microsoft power bi android 2.0.0 – < 2.2.260210.21290750
microsoft power bi iOS 1.0.0 – < 1.2.260302.2193910
microsoft powerpoint 1.0 – < 2.106.26020617
microsoft teams 2.0.0 – < 8.3.1
microsoft word 16.0.0.0 – < 16.0.19822.20038

Referencias y parches

Coincidencias CPE (NVD) (20)
  • cpe:2.3:a:microsoft:365_copilot:*:*:*:*:*:iphone_os:*:* < 2.107.2
  • cpe:2.3:a:microsoft:365_copilot:*:*:*:*:*:android:*:* < 16.0.19815.10000
  • cpe:2.3:a:microsoft:edge:*:*:*:*:*:android:*:* < 145.3800.99
  • cpe:2.3:a:microsoft:edge:*:*:*:*:*:iphone_os:*:* < 145.3800.99
  • cpe:2.3:a:microsoft:excel:*:*:*:*:*:iphone_os:*:* < 2.106.2
  • cpe:2.3:a:microsoft:excel:*:*:*:*:*:android:*:* < 16.0.19822.20038
  • cpe:2.3:a:microsoft:loop:*:*:*:*:*:iphone_os:*:* < 2.106
  • cpe:2.3:a:microsoft:onenote:*:*:*:*:*:android:*:* < 16.0.19725.20142
  • cpe:2.3:a:microsoft:onenote:-:*:*:*:*:iphone_os:*:*
  • cpe:2.3:a:microsoft:outlook:*:*:*:*:*:android:*:* < 5.2605.0
  • cpe:2.3:a:microsoft:outlook:*:*:*:*:*:iphone_os:*:* < 5.2605.0
  • cpe:2.3:a:microsoft:outlook:-:*:*:*:*:macos:*:*
  • cpe:2.3:a:microsoft:power_bi:*:*:*:*:*:android:*:* < 2.2.260210.21290750
  • cpe:2.3:a:microsoft:power_bi:-:*:*:*:*:iphone_os:*:*
  • cpe:2.3:a:microsoft:powerpoint:*:*:*:*:*:iphone_os:*:* < 2.106.2
  • cpe:2.3:a:microsoft:powerpoint:*:*:*:*:*:android:*:* < 16.0.19822.20038
  • cpe:2.3:a:microsoft:teams:*:*:*:*:*:android:*:* < 1.0.0.2026043102
  • cpe:2.3:a:microsoft:teams:*:*:*:*:*:iphone_os:*:* < 8.3.1
  • cpe:2.3:a:microsoft:word:*:*:*:*:*:iphone_os:*:* < 2.106.2
  • cpe:2.3:a:microsoft:word:*:*:*:*:*:android:*:* < 16.0.19822.20038

CVE recientes del mismo producto — Microsoft Edge