← All advisories

Unrated severityNVD Advisory· Published Jan 22, 2026· Updated Apr 1, 2026

M365 Copilot Information Disclosure Vulnerability

CVE-2026-24307

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Affected products

1

Microsoft/Microsoft 365 Copilot BizChatcpe-rescue
Range: -

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24307mitrevendor-advisorypatch

News mentions

0

No linked articles in our index yet.