microsoft 365 copilot güvenlik açıkları (CVE)

microsoft 365 copilot için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

53 sonuç
7.8Yüksek
CVE-2026-50387

Windows GDI Elevation of Privilege Vulnerability

Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office for Android; Microsoft Microsoft Office LTSC for Mac 2021; Microsoft Microsoft Office LTSC for Mac 2024

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

9.6Kritik
CVE-2026-48561

Microsoft Edge Copilot Remote Code Execution Vulnerability

Microsoft Microsoft Edge Copilot for Android; Microsoft Microsoft Edge Copilot for IOS

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.

6.5Orta
CVE-2026-42895

Microsoft Copilot Tampering Vulnerability

Microsoft Microsoft 365 Copilot

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.

8.4Yüksek
CVE-2026-45463

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac

Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

8.4Yüksek
CVE-2026-45461

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

4.7Orta
CVE-2026-45460

Microsoft Office Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office for Android

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.

8.4Yüksek
CVE-2026-45474

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

8.4Yüksek
CVE-2026-45472

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office 365 for Mac

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

9.3Kritik
CVE-2026-41090

Microsoft Copilot Tampering Vulnerability

Microsoft Microsoft 365 Copilot for iOS

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.

4.4Orta
CVE-2026-41100

Microsoft 365 Copilot for Android Spoofing Vulnerability

Microsoft Microsoft 365 Copilot for Android; Microsoft Microsoft Excel for Android; Microsoft Microsoft Loop for Android; Microsoft Microsoft OneNote for Android

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

8.4Yüksek
CVE-2026-40363

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 2016; Microsoft Microsoft Office 2019; Microsoft Microsoft Office for Android

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.