M365 Copilot Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
🎯 Affected products20
- Microsoft 365 Copilot for Android
- Microsoft 365 Copilot for iOS
- Microsoft Edge for Android
- Microsoft Edge for iOS
- Microsoft Excel for Android
- Microsoft Excel for iOS
- Microsoft Loop for iOS
- Microsoft OneNote for Android
- Microsoft OneNote for iOS
- Microsoft Outlook for Android
- Microsoft Outlook for Mac
- Microsoft Outlook for iOS
- Microsoft PowerBI for Android
- Microsoft PowerBI for iOS
- Microsoft PowerPoint for Android
- Microsoft PowerPoint for iOS
- Microsoft Teams for Android
- Microsoft Teams for iOS
- Microsoft Word for Android
- Microsoft Word for iOS
✅ Remediation
KBRelease Notes (Security Update) — fixed build 2.106.26020617 KBRelease Notes (Security Update) — fixed build 5.2605 KBRelease Notes (Security Update) — fixed build 2.107.2 KBRelease Notes (Security Update) — fixed build 145.3800.99 KBRelease Notes (Security Update) — fixed build 8.3.1 KBRelease Notes (Security Update) — fixed build 1.0.0.2026043102 KBRelease Notes (Security Update) — fixed build 16.0.19822.20038 KBRelease Note (Security Update) — fixed build 2.106.26020617 KBRelease Notes (Security Update) — fixed build 16.0.19815.10000 KBRelease Note (Security Update) — fixed build 2.2.260210.21290750 KBRelease Note (Security Update) — fixed build 1.2.260302.2193910 KBRelease Notes (Security Update) — fixed build 16.0.19725.20142
🔗 References (21)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26133
- patchhttps://apps.apple.com/us/app/microsoft-onenote/id410395246?platform=mac
- patchhttps://go.microsoft.com/fwlink/p/?linkid=831049
- patchhttps://play.google.com/store/apps/details/Microsoft_Outlook?id=com.microsoft.office.outlook&hl=en_US&pli=1
- referencehttps://learn.microsoft.com/en-us/officeupdates/release-notes-outlook-mobile
- patchhttps://apps.apple.com/us/app/microsoft-365-copilot/id541164041
- referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
- patchhttps://apps.apple.com/us/app/microsoft-teams/id1113153706
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.teams
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US
- patchhttps://apps.apple.com/us/app/microsoft-powerpoint/id586449534?platform=mac
- patchhttps://apps.apple.com/us/app/microsoft-word/id462054704?mt=12
- patchhttps://apps.apple.com/us/app/microsoft-loop/id1637682491
- patchhttps://apps.apple.com/ca/app/microsoft-outlook/id951937596
- patchhttps://play.google.com/store/search?q=copilot+365&c=apps
- patchhttps://play.google.com/store/search?q=powerbi&c=apps
- patchhttps://apps.apple.com/us/app/microsoft-power-bi/id929738808
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.onenote
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US
- patchhttps://apps.apple.com/us/app/microsoft-excel/id586683407?platform=mac