Microsoft 365 Copilot vulnerabilities
23 known vulnerabilities affecting microsoft/365_copilot.
Total CVEs
23
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH15MEDIUM4
Vulnerabilities
Page 2 of 2
CVE-2026-25180P4MEDIUMCVSS 5.5fixed in 16.0.19822.200002026-03-10
CVE-2026-25180 [MEDIUM] CWE-125 CVE-2026-25180: Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose infor
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-53799P4MEDIUMCVSS 5.5fixed in 16.0.19220.200002025-09-09
CVE-2025-53799 [MEDIUM] CWE-908 CVE-2025-53799: Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclo
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-41100P4MEDIUMCVSS 4.4fixed in 16.0.19822.201902026-05-12
CVE-2026-41100 [MEDIUM] CWE-284 CVE-2026-41100: Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
nvd
← Previous2 / 2