7.7Yüksek
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Microsoft Microsoft 365 Copilot güvenlik açıkları (CVE)
Microsoft Microsoft 365 Copilot için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
9.9Kritik
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
9.9Kritik
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
1.7%EPSS
9.3Kritik
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
8.8Yüksek
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
6.5Orta
Microsoft Copilot Tampering Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
9.8Kritik
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
1.1%EPSS
7.7Yüksek
Microsoft M365 Copilot Remote Code Execution Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.
6.5Orta
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.6%EPSS
6.5Orta
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
9.3Kritik
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft Microsoft 365 Copilot
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
5.3Orta
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
9.3Kritik
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.
9.3Kritik
M365 Copilot Information Disclosure Vulnerability
Microsoft Microsoft 365 Copilot
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
7.2%EPSS