CVE-2026-41100HighCVSS 4.4
Microsoft 365 Copilot for Android Spoofing Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
🎯 Affected products6
- Microsoft 365 Copilot for Android
- Microsoft Excel for Android
- Microsoft Loop for Android
- Microsoft OneNote for Android
- Microsoft PowerPoint for Android
- Microsoft Word for Android
✅ Remediation
KBRelease Notes (Security Update) — fixed build 16.0.19822.20190
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41100
- patchhttps://play.google.com/store/search?q=copilot+365&c=apps
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.loop
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.onenote