← Back

365 Word Copilot

365_word_copilot

Vendor: Microsoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1365 Word Copilot
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.4 HIGH· v3
N/A· v2
Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network.
1Microsoft
1365 Word Copilot
Jun 17, 2026
Oct 9, 2025
N/A· v4
9.3 CRITICAL· v3
N/A· v2
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.