Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-41090 1 Microsoft 1 365 Copilot Ios 2026-05-22 9.3 Critical
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
CVE-2026-26133 1 Microsoft 35 365 Copilot, 365 Copilot Android, 365 Copilot For Android and 32 more 2026-04-14 7.1 High
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.