Advisories · Technology

Microsoft Copilot Studio.

Every CVE that names Microsoft Copilot Studio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-80098 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Copilot Studio Elevation of Privilege Vulnerability
- Microsoft Copilot Studio
- Weak cryptography or TLS
Not analysed yet 3 Sept 2026
CVE-2026-21520 CVE record

CVSS 7.5 High

Copilot Studio Information Disclosure Vulnerability
- Microsoft Copilot Studio
- Command injection
Not analysed yet 22 Jan 2026
CVE-2024-49038 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Microsoft Copilot Studio Elevation Of Privilege Vulnerability
- Microsoft Copilot Studio
- Cross-site scripting (XSS)
Not analysed yet 26 Nov 2024
CVE-2024-43610 CVE record

CVSS 7.4 High

Copilot Studio Information Disclosure Vulnerability
- Microsoft Copilot Studio
- Information disclosure
Not analysed yet 9 Oct 2024
CVE-2024-38206 CVE record

CVSS 8.5 HighCritical · CVSS 7+ and EPSS

Microsoft Copilot Studio Information Disclosure Vulnerability
- Microsoft Copilot Studio
- Server-side request forgery (SSRF)
Not analysed yet 6 Aug 2024