Microsoft Copilot
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Copilot.
Recent Microsoft Copilot Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-85885 | CVE-2026-85885 Microsoft 365 Copilot Elevation of Privilege Vulnerability | September 17, 2026 |
| CVE-2026-78501 | CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability | September 17, 2026 |
| CVE-2026-85887 | CVE-2026-85887 M365 Copilot Information Disclosure Vulnerability | September 17, 2026 |
| CVE-2026-55946 | CVE-2026-55946 Microsoft Copilot Information Disclosure Vulnerability | September 17, 2026 |
| CVE-2026-81380 | CVE-2026-81380 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | September 8, 2026 |
| CVE-2026-81381 | CVE-2026-81381 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | September 8, 2026 |
| CVE-2026-80098 | CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability | September 3, 2026 |
| CVE-2026-58616 | CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability | August 28, 2026 |
| CVE-2026-69855 | CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability | August 20, 2026 |
| CVE-2026-24301 | CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability | August 18, 2026 |
By the Year
In 2026 there have been 3 vulnerabilities in Microsoft Copilot with an average score of 6.3 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 3 | 6.30 |
It may take a day or so for new Copilot vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Copilot Security Vulnerabilities
Sep 2026: Microsoft Copilot Information Disclosure Vulnerability
CVE-2026-55946
6.1 - Medium
- September 17, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
Command Injection
Jul 2026: Outlook Copilot Tampering Vulnerability
CVE-2026-55145
6.3 - Medium
- July 14, 2026
Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.
Command Injection
Mar 2026: Microsoft Copilot Information Disclosure Vulnerability
CVE-2026-26136
6.5 - Medium
- March 19, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
Command Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Copilot or by Microsoft? Click the Watch button to subscribe.
