3C
Product
365 Copilot
by Microsoft · last CVE Sep 17, 2026
54
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 9High 38Medium 7Low 0
Watch

Add 365 Copilot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50517
9.9
2%
Jul 24
Microsoft M365 Copilot Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-58617
9.8
1%
Jul 14
M365 Copilot for iOS Elevation of Privilege Vulnerability
Affected: before 2.111.4
CVE-2025-60724
9.8
6%
Nov 11
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network
Affected: before 16.0.19426.20044
CVE-2025-53766
9.8
8%
Aug 12
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network
Affected: before 16.0.19127.20000
CVE-2026-48561
9.6
1%
Jul 14
Microsoft Edge Copilot Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2021-43905
9.6
3%
Dec 15
Microsoft Office app Remote Code Execution Vulnerability
Affected: before 18.2110.13110.0
CVE-2026-41106
9.3
1%
Jul 2
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-41090
9.3
0%
May 22
Microsoft Copilot Tampering Vulnerability
Affected: All versions, or not specified
CVE-2026-33102
9.3
0%
Apr 23
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-85885
8.8
1%
Sep 17
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-47645
8.8
1%
Jun 19
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-45463
8.4
0%
Jun 9
Microsoft Office Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-45461
8.4
0%
Jun 9
Microsoft Office Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-45474
8.4
0%
Jun 9
Microsoft Office Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-45472
8.4
0%
Jun 9
Microsoft Office Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2026-40363
8.4
0%
May 12
Microsoft Office Remote Code Execution Vulnerability
Affected: before 16.0.19822.20190
CVE-2025-49697
8.4
1%
Jul 8
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-49696
8.4
1%
Jul 8
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-49695
8.4
1%
Jul 8
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-47953
8.4
1%
Jun 10
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-47167
8.4
1%
Jun 10
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: before 16.0.18925.20000
CVE-2025-47164
8.4
1%
Jun 10
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-47162
8.4
1%
Jun 10
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2026-50387
7.8
0%
Jul 14
Windows GDI Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-42831
7.8
0%
May 12
Microsoft Office Remote Code Execution Vulnerability
Affected: before 16.0.19822.20190
CVE-2026-26110
7.8
1%
Mar 10
Microsoft Office Remote Code Execution Vulnerability
Affected: before 16.0.19822.20000
CVE-2026-26134
7.8
0%
Mar 10
Microsoft Office Elevation of Privilege Vulnerability
Affected: before 16.0.19822.20000
CVE-2025-62557
7.8
0%
Dec 9
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-62554
7.8
0%
Dec 9
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-62199
7.8
1%
Nov 11
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: before 16.0.19426.20044
CVE-2025-59234
7.8
1%
Oct 14
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: before 16.0.19328.20000
CVE-2025-59227
7.8
1%
Oct 14
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: before 16.0.19328.20000
CVE-2025-53732
7.8
0%
Aug 12
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: before 16.0.19127.20000
CVE-2025-49702
7.8
1%
Jul 8
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: All versions, or not specified
CVE-2025-30388
7.8
4%
May 13
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally
Affected: before 16.0.18827.20000
CVE-2025-30386
7.8
1%
May 13
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally
Affected: before 16.0.18827.20000
CVE-2024-38250
7.8
1%
Sep 10
Windows Graphics Component Elevation of Privilege Vulnerability
Affected: All versions, or not specified
CVE-2026-85887
7.7
1%
Sep 17
M365 Copilot Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2026-42895
7.5
1%
Jun 19
Microsoft Copilot Tampering Vulnerability
Affected: All versions, or not specified
CVE-2026-54130
7.5
1%
Jun 18
M365 Copilot Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2026-42827
7.5
1%
May 22
M365 Copilot Information Disclosure Vulnerability
Affected: All versions, or not specified
CVE-2026-24307
7.5
1%
Jan 22
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network
Affected: All versions, or not specified
CVE-2025-32711
7.5
9%
Jun 11
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network
Affected: All versions, or not specified
CVE-2025-26687
7.5
1%
Apr 8
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network
Affected: before 16.0.18730.20000
CVE-2026-26133
7.1
0%
Mar 13
M365 Copilot Information Disclosure Vulnerability
Affected: before 2.107.2; before 16.0.19815.10000
CVE-2026-24285
7.0
0%
Mar 10
Win32k Elevation of Privilege Vulnerability
Affected: before 16.0.19822.20000
CVE-2023-36565
7.0
0%
Oct 10
Microsoft Office Graphics Elevation of Privilege Vulnerability
Affected: before 16.0.16827.20138
CVE-2026-41614
6.2
0%
May 12
M365 Copilot for Desktop Spoofing Vulnerability
Affected: before 19.2604.43111.0
CVE-2026-25180
5.5
1%
Mar 10
Windows Graphics Component Information Disclosure Vulnerability
Affected: before 16.0.19822.20000
CVE-2025-53799
5.5
1%
Sep 9
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally
Affected: before 16.0.19220.20000
Page 1 of 2 · 54 total