Microsoft Copilot vulnerabilities

2 known vulnerabilities in Microsoft Copilot from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Microsoft Copilot: Improper Neutralization of Special Elements used in a Command

  CVE-2026-55145Jul 14, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.

• 7.5 High severity

  Microsoft Copilot: Improper Neutralization of Special Elements used in a Command

  CVE-2026-26136Mar 19, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.