Microsoft 365 Copilot vulnerabilities
55 published vulnerabilities in Microsoft 365 Copilot. The most were published in 2026 (30), and 30 so far in 2026.
Microsoft 365 Copilot vulnerabilities by year
2021
2023
2024
2025
2026
Most exploited Microsoft 365 Copilot vulnerabilities
- CVE-2026-85885 Microsoft 365 Copilot Elevation of Privilege Vulnerability
- CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
- CVE-2026-54130 M365 Copilot Information Disclosure Vulnerability
- CVE-2025-60724 GDI+ Remote Code Execution Vulnerability
- CVE-2025-53766 GDI+ Remote Code Execution Vulnerability
- CVE-2026-48561 Microsoft Edge Copilot Remote Code Execution Vulnerability
- CVE-2021-43905 Microsoft Office app Remote Code Execution Vulnerability
- CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability
- CVE-2026-41090 Microsoft Copilot Tampering Vulnerability
- CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability
- CVE-2026-24307 M365 Copilot Information Disclosure Vulnerability
- CVE-2025-32711 M365 Copilot Information Disclosure Vulnerability
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.