365 Copilot Chat CVE Vulnerabilities
By Microsoft — 2 known vulnerabilities
Critical
0
High
2
Medium
0
Low
0
None
0
All 365 Copilot Chat CVEs
CVE-2026-26164
7.5
high
Improper neutralization of special elements in output used by a downstream component ('injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
May 7, 2026
CVE-2026-26129
7.5
high
Improper neutralization of special elements in M365 Copilot allows an unauthorized attacker to disclose information over a network.
May 7, 2026