Multiple vulnerabilities in Microsoft Copilot Plugin

Descripción

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in GitHub Copilot can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Game: Age of Empires II: Definitive Edition can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Minecraft Bedrock Dedicated Server can be exploited remotely to execute arbitrary code.
4. A tampering vulnerability in Outlook Copilot can be exploited remotely to spoof user interface.

Notas informativas originales

• CVE-2026-50510

• CVE-2026-50663
• CVE-2026-55010
• CVE-2026-55145

Lista CVE

• CVE-2026-50663
  critical
• CVE-2026-50510
  critical
• CVE-2026-55010
  critical
• CVE-2026-55145
  high

Lista KB

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com