Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,554CVE records
2,892Published, last 7 days
1,728In CISA KEV
1,419Critical, last 30 days
5,599Analysed
01:16 UTCLast NVD sync
Filters Show:
53 results. Microsoft 365 Copilot.
Page 1 of 3| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-85885 | High | 8.8 |  Microsoft 365 Copilot | Command injection | — | — | 0.72% | Sep 17, 2026 |
| CVE-2026-50517 | Critical | 9.9 | Microsoft 365 Copilot | Deserialization of untrusted data | — | — | 1.7% | Jul 24, 2026 |
| CVE-2026-58617 | Critical | 9.8 | Microsoft 365 Copilot | Improper access control | — | — | 0.79% | Jul 14, 2026 |
| CVE-2026-50387 | High | 7.8 | Microsoft 365 Copilot +15 | Stack-based buffer overflow | — | — | 0.33% | Jul 14, 2026 |
| CVE-2026-48561 | Critical | 9.6 | Microsoft 365 Copilot | Command injection | — | — | 0.86% | Jul 14, 2026 |
| CVE-2026-41106 | Critical | 9.3 | Microsoft 365 Copilot | Open redirect | — | — | 0.72% | Jul 2, 2026 |
| CVE-2026-47645 | High | 8.8 | Microsoft 365 Copilot | Open redirect | — | — | 0.76% | Jun 19, 2026 |
| CVE-2026-42895 | High | 7.5 | Microsoft 365 Copilot | Command injection | — | — | 0.71% | Jun 19, 2026 |
| CVE-2026-54130 | High | 7.5 | Microsoft 365 Copilot | Missing authentication for critica | — | — | 1.1% | Jun 18, 2026 |
| CVE-2026-45474 | High | 8.4 | Microsoft 365 Apps +6 | Use after free | — | — | 0.36% | Jun 9, 2026 |
| CVE-2026-45472 | High | 8.4 | Microsoft 365 Apps +6 | Use after free | — | — | 0.36% | Jun 9, 2026 |
| CVE-2026-45463 | High | 8.4 | Microsoft 365 Apps +6 | Stack-based buffer overflow | — | — | 0.36% | Jun 9, 2026 |
| CVE-2026-45461 | High | 8.4 | Microsoft 365 Apps +6 | Use after free | — | — | 0.36% | Jun 9, 2026 |
| CVE-2026-45460 | Medium | 4.7 | Microsoft 365 Apps +5 | CWE-126 | — | — | 0.42% | Jun 9, 2026 |
| CVE-2026-42827 | High | 7.5 | Microsoft 365 Copilot | Command injection | — | — | 0.92% | May 22, 2026 |
| CVE-2026-41090 | Critical | 9.3 | Microsoft 365 Copilot | Command injection | — | — | 0.76% | May 22, 2026 |
| CVE-2026-42831 | High | 7.8 | Microsoft 365 Copilot +2 | Heap-based buffer overflow | — | — | 0.47% | May 12, 2026 |
| CVE-2026-41614 | Medium | 6.2 | Microsoft 365 Copilot | Improper access control | — | — | 0.40% | May 12, 2026 |
| CVE-2026-41100 | Medium | 4.4 | Microsoft 365 Copilot | Improper access control | — | — | 0.26% | May 12, 2026 |
| CVE-2026-40363 | High | 8.4 | Microsoft 365 Apps +3 | Heap-based buffer overflow | — | — | 0.36% | May 12, 2026 |
