# Microsoft 365 Copilot


- [CVE-2026-85885](https://insights.sbomify.com/CVE-2026-85885/): Microsoft 365 Copilot Elevation of Privilege Vulnerability (critical 9.9)
- [CVE-2026-50517](https://insights.sbomify.com/CVE-2026-50517/): Microsoft M365 Copilot Remote Code Execution Vulnerability (critical 9.9)
- [CVE-2026-54130](https://insights.sbomify.com/CVE-2026-54130/): M365 Copilot Information Disclosure Vulnerability (critical 9.8)
- [CVE-2025-60724](https://insights.sbomify.com/CVE-2025-60724/): GDI+ Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2025-53766](https://insights.sbomify.com/CVE-2025-53766/): GDI+ Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-48561](https://insights.sbomify.com/CVE-2026-48561/): Microsoft Edge Copilot Remote Code Execution Vulnerability (critical 9.6)
- [CVE-2021-43905](https://insights.sbomify.com/CVE-2021-43905/): Microsoft Office app Remote Code Execution Vulnerability (critical 9.6)
- [CVE-2026-41106](https://insights.sbomify.com/CVE-2026-41106/): Microsoft 365 Copilot Elevation of Privilege Vulnerability (critical 9.3)
- [CVE-2026-41090](https://insights.sbomify.com/CVE-2026-41090/): Microsoft Copilot Tampering Vulnerability (critical 9.3)
- [CVE-2026-33102](https://insights.sbomify.com/CVE-2026-33102/): Microsoft 365 Copilot Elevation of Privilege Vulnerability (critical 9.3)
- [CVE-2026-24307](https://insights.sbomify.com/CVE-2026-24307/): M365 Copilot Information Disclosure Vulnerability (critical 9.3)
- [CVE-2025-32711](https://insights.sbomify.com/CVE-2025-32711/): M365 Copilot Information Disclosure Vulnerability (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/365-copilot/