Microsoft 365 Copilot Spoofing Vulnerability

A spoofing vulnerability has been identified in Microsoft 365 Copilot for Android, stemming from improper access control. This vulnerability allows an authorized attacker to perform spoofing locally. While the vulnerability could lead to some loss of confidentiality and integrity, it does not affect availability.

Impact

Exploitation of this vulnerability could allow an authorized attacker to spoof identities or information within the application.

Remediation

Users are advised to download the latest security update for Microsoft 365 Copilot for Android, available on the Google Play Store.