← Database

CVE-2026-41100

MEDIUM CVSS: 4.4 Published: 2026-05-12 Modified: 2026-06-17

Description

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

Affected Platforms

Microsoft 365 Copilot

Weakness Type

CWE-284, NVD-CWE-Other

References