Multiple vulnerabilities in Microsoft Copilot Plugin

Описание

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in GitHub Copilot can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Game: Age of Empires II: Definitive Edition can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Minecraft Bedrock Dedicated Server can be exploited remotely to execute arbitrary code.
4. A tampering vulnerability in Outlook Copilot can be exploited remotely to spoof user interface.

Первичный источник обнаружения

• CVE-2026-50510
  CVE-2026-50663
  CVE-2026-55010
  CVE-2026-55145
  

Эксплуатация

Список CVE

• CVE-2026-50663
  critical
• CVE-2026-50510
  critical
• CVE-2026-55010
  unknown
• CVE-2026-55145
  unknown

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com