← Database
CVE-2026-26133
HIGH
CVSS: 7.1
Published: 2026-03-16
Modified: 2026-06-17
Description
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Affected Platforms
Microsoft 365 CopilotMicrosoft OnenoteMicrosoft PowerpointMicrosoft ExcelMicrosoft WordMicrosoft OutlookMicrosoft Power BiMicrosoft TeamsMicrosoft LoopMicrosoft Edge
Weakness Type
CWE-77, CWE-77