Mar 2026: M365 Copilot Information Disclosure Vulnerability
CVE-2026-26133 Published on March 13, 2026

M365 Copilot Information Disclosure Vulnerability
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Vendor Advisory NVD


Products Associated with CVE-2026-26133

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

 
 
 
 
 
 
 
 
 
 
 
 
 
 

Affected Versions

Microsoft 365 Copilot for Android: Microsoft 365 Copilot for iOS: Microsoft Edge for Android: Microsoft Edge for iOS: Microsoft Excel for Android: Microsoft Excel for iOS: Microsoft Loop for iOS: Microsoft OneNote: Microsoft OneNote for Android: Microsoft Outlook for Android: Microsoft Outlook for iOS: Microsoft Outlook for Mac: Microsoft PowerBI for Android: Microsoft PowerBI for iOS: Microsoft PowerPoint for Android: Microsoft PowerPoint for iOS: Microsoft Teams for Android: Microsoft Teams for iOS: Microsoft Word for Android: Microsoft Word for iOS: