8.0Alta
Microsoft Office Graphics Elevation of Privilege Vulnerability
Microsoft Microsoft Office for Android
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
Vulnerabilidades de microsoft 365 copilot (CVE)
Registros CVE publicados para microsoft 365 copilot, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
7.7Alta
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
9.9Crítica
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
9.9Crítica
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
1.7%EPSS
8.1Alta
M365 Copilot for iOS Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot for iOS
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
7.8Alta
Windows GDI Elevation of Privilege Vulnerability
Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office for Android; Microsoft Microsoft Office LTSC for Mac 2021; Microsoft Microsoft Office LTSC for Mac 2024
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
9.6Crítica
Microsoft Edge Copilot Remote Code Execution Vulnerability
Microsoft Microsoft Edge Copilot for Android; Microsoft Microsoft Edge Copilot for IOS
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.
9.3Crítica
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
8.8Alta
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
6.5Media
Microsoft Copilot Tampering Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
9.8Crítica
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
1.1%EPSS
8.4Alta
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4Alta
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
4.7Media
Microsoft Office Information Disclosure Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office for Android
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.
8.4Alta
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
8.4Alta
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
7.7Alta
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.
6.5Media
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.6%EPSS
9.3Crítica
Microsoft Copilot Tampering Vulnerability
Microsoft Microsoft 365 Copilot for iOS
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
6.5Media
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.8Alta
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft Office for Android; Microsoft Microsoft Office LTSC for Mac 2021; Microsoft Microsoft Office LTSC for Mac 2024
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
6.2Media
M365 Copilot for Desktop Spoofing Vulnerability
Microsoft M365 Copilot for Desktop
Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.
4.4Media
Microsoft 365 Copilot for Android Spoofing Vulnerability
Microsoft Microsoft 365 Copilot for Android; Microsoft Microsoft Excel for Android; Microsoft Microsoft Loop for Android; Microsoft Microsoft OneNote for Android
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
8.4Alta
Microsoft Office Remote Code Execution Vulnerability
Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office for Android
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
9.3Crítica
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.