Microsoft 365 Copilot for Android Spoofing Vulnerability
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-41100US | — | — | ||
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedMicrosoft 365 Copilot for Android
16.0.19822.20190:Security Update:https://play.google.com/store/search?q=copilot+365&c=apps
https://play.google.com/store/search?q=copilot+365&c=apps - FixedMicrosoft Excel for Android
16.0.19822.20190:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US
https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US - FixedMicrosoft Loop for Android
16.0.19822.20190:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.loop
https://play.google.com/store/apps/details?id=com.microsoft.loop - FixedMicrosoft OneNote for Android
16.0.19822.20190:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.onenote
https://play.google.com/store/apps/details?id=com.microsoft.office.onenote - FixedMicrosoft PowerPoint for Android
16.0.19822.20190:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US
https://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US - FixedMicrosoft Word for Android
16.0.19822.20190:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US
https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan