← Database

CVE-2026-24307

CRITICAL CVSS: 9.3 Published: 2026-01-22 Modified: 2026-06-17

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Affected Platforms

Microsoft 365 Copilot

Weakness Type

CWE-1287

References