Advisories · Technology

Microsoft 365 Copilot's Business Chat.

Every CVE that names Microsoft 365 Copilot's Business Chat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78501 CVE record

CVSS 8.6 High

Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- Command injection
- CWE-923
Not analysed yet 17 Sept 2026
CVE-2026-26129 CVE record

CVSS 7.5 High

M365 Copilot Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- CWE-138
Not analysed yet 7 May 2026
CVE-2026-26164 CVE record

CVSS 7.5 High

M365 Copilot Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- Other injection
Not analysed yet 7 May 2026
CVE-2025-59286 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Copilot Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- Command injection
Not analysed yet 9 Oct 2025
CVE-2025-59272 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Copilot Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- Command injection
Not analysed yet 9 Oct 2025
CVE-2025-53787 CVE record

CVSS 8.2 High

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- Command injection
Not analysed yet 7 Aug 2025
CVE-2025-53774 CVE record

CVSS 6.5 Medium

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- Command injection
Not analysed yet 7 Aug 2025