-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security

Vulnerability Details

Registries

Custom Views

Weaknesses

Attack Patterns

Filters & Tools

Microsoft Loop for iOS

Source -

CNA

CNA CVEs -

1

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0

Related CVEs Related Vendors Related Assigners Reports

1Vulnerabilities found

Assigner-Microsoft Corporation

Assigner-Microsoft Corporation

CVSS Score-7.1||HIGH

EPSS-0.43% / 35.37%

||

7 Day CHG~0.00%

Published-13 Mar, 2026 | 21:10

Updated-19 Jun, 2026 | 18:18

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

M365 Copilot Information Disclosure Vulnerability

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Action-Not Available

Vendor-Microsoft Corporation

Product-365_copilot power_bi excel loop teams word powerpoint edge outlook onenote Microsoft Outlook for Android Microsoft PowerBI for Android Microsoft OneNote Microsoft Teams for Android Microsoft PowerBI for iOS Microsoft Teams for iOS Microsoft Outlook for Mac Microsoft PowerPoint for Android Microsoft Word for iOS Microsoft OneNote for Android Microsoft 365 Copilot for iOS Microsoft Excel for Android Microsoft 365 Copilot for Android Microsoft Word for Android Microsoft Outlook for iOS Microsoft Excel for iOS Microsoft Loop for iOS Microsoft Edge for iOS Microsoft PowerPoint for iOS Microsoft Edge for Android

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')