// Microsoft 365HIGH
CVE-2026-78501 is a command injection vulnerability (CWE-77) in Microsoft 365 Copilot's Business Chat that allows unauthorized attackers to disclose sensitive information over a network with high confidentiality impact. The vulnerability requires user interaction and has a CVSS 3.1 score of 7.4. Microsoft has released an official fix and manages remediation server-side for this cloud service.
// Get alerts for Microsoft 365