Multiple vulnerabilities in Microsoft Apps

Description

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A tampering vulnerability in Microsoft Bing can be exploited remotely to spoof user interface.
2. An information disclosure vulnerability in M365 Copilot can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2026-26120

• CVE-2026-24299

Exploitation

Related products

• Microsoft-Bing
• Microsoft-365

CVE list

• CVE-2026-24299
  high
• CVE-2026-26120
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com