Microsoft 365 Copilot Information Disclosure Vulnerability
Vulnerability
A vulnerability in Microsoft 365 Copilot's Business Chat component allows unauthorized attackers to disclose information over a network. This issue arises from improper neutralization of special elements in output, creating an injection flaw.
Impact
Exploitation of this vulnerability could lead to unauthorized information disclosure.
Added: May 7, 2026, 10:28 PM
Updated: May 7, 2026, 10:28 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.4remediation
0.0relevance
7.7threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.