CVSS 3.1
7.1 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:NCVE-2026-26133
High (7.1) in microsoft. EPSS 0.4% chance of exploitation in the next 30 days.
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
- CWE
- CWE-77
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:365_copilot
- microsoft:edge
- microsoft:excel
- microsoft:loop
- microsoft:onenote
- microsoft:outlook
- microsoft:power_bi
- microsoft:powerpoint
- microsoft:teams
- microsoft:word