#m365
3 articles
Security Alerts Jul 24, 2026
CVE-2026-50517: deserialization of untrusted data enabling code execution in M365 Copilot (CVSS 9.9)
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network....
Security Alerts Jul 3, 2026
CVE-2026-41106: url redirection to untrusted site ('open redirect') in M365 Copilot (CVSS 9.3)
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network....
Security Alerts Jun 19, 2026
CVE-2026-54130: missing authentication for critical function in M365 Copilot (CVSS 9.8)
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network....