Microsoft Copilot
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Copilot.
Recent Microsoft Copilot Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-69855 | CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability | August 20, 2026 |
| CVE-2026-24301 | CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability | August 18, 2026 |
| CVE-2026-65675 | CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability | August 11, 2026 |
| CVE-2026-70335 | CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | August 11, 2026 |
| CVE-2026-50517 | CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability | July 23, 2026 |
| CVE-2026-48561 | CVE-2026-48561 Microsoft Copilot Remote Code Execution Vulnerability | July 14, 2026 |
| CVE-2026-55145 | CVE-2026-55145 Outlook Copilot Tampering Vulnerability | July 14, 2026 |
| CVE-2026-58617 | CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability | July 14, 2026 |
| CVE-2026-47282 | CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | July 14, 2026 |
| CVE-2026-50510 | CVE-2026-50510 GitHub Copilot Remote Code Execution Vulnerability | July 14, 2026 |
By the Year
In 2026 there have been 2 vulnerabilities in Microsoft Copilot with an average score of 6.4 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 6.40 |
It may take a day or so for new Copilot vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Copilot Security Vulnerabilities
Jul 2026: Outlook Copilot Tampering Vulnerability
CVE-2026-55145
6.3 - Medium
- July 14, 2026
Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.
Command Injection
Mar 2026: Microsoft Copilot Information Disclosure Vulnerability
CVE-2026-26136
6.5 - Medium
- March 19, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
Command Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Copilot or by Microsoft? Click the Watch button to subscribe.
