DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Windows Terminal, 365 Copilot, Github Copilot: Mehrere Schwachstellen
view advisory published 2026-07-14
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Terminal, 365 Copilot und Github Copilotausnutzen, um beliebigen Programmcode auszuführen, um falsche Informationen darzustellen und um seine Privilegien zu erhöhen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-58617US | critical9.8 | — | ||
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-55145US | high7.1 | — | ||
Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network. | ||||
| CVE-2026-54124US | — | — | ||
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-50510US | high7.8 | — | ||
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally. | ||||
| CVE-2026-50438US | — | — | ||
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-58636US | — | — | ||
Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-58595US | — | — | ||
Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-48561US | — | — | ||
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-41106external
- Microsoft Security Advisory CVE-2026-48561external
- Microsoft Security Advisory CVE-2026-50438external
- Microsoft Security Advisory CVE-2026-54124external
- Microsoft Security Advisory CVE-2026-58595external
- Microsoft Security Advisory CVE-2026-58617external
- Microsoft Security Advisory CVE-2026-58636external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan