Multiple vulnerabilities in Microsoft Apps

Description

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in M365 Copilot can be exploited remotely to obtain sensitive information.
2. A remote code execution vulnerability in Microsoft M365 Copilot can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-42824

• CVE-2026-45497

Exploitation

Related products

• Microsoft-365

CVE list

• CVE-2026-42824
  critical
• CVE-2026-45497
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com