CVE-2026-26133
highPriorität · verfolgen · 0EPSS 0.004 · 38. PerzentilDEEUUSEPSS · bewertet 2026-10-27
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenMicrosoft 365 Copilot for Androidmsrc_csaf
16.0.19815.10000:Security Update:https://play.google.com/store/search?q=copilot+365&c=apps
https://play.google.com/store/search?q=copilot+365&c=apps - BehobenMicrosoft 365 Copilot for iOSmsrc_csaf
2.107.2:Security Update:https://apps.apple.com/us/app/microsoft-365-copilot/id541164041
https://apps.apple.com/us/app/microsoft-365-copilot/id541164041 - BehobenMicrosoft Edge for Androidmsrc_csaf
145.3800.99:Security Update:https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security - BehobenMicrosoft Edge for iOSmsrc_csaf
145.3800.99:Security Update:https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security - BehobenMicrosoft Excel for Androidmsrc_csaf
16.0.19822.20038:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US
https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US - BehobenMicrosoft Excel for iOSmsrc_csaf
2.106.26020617:Security Update:https://apps.apple.com/us/app/microsoft-excel/id586683407?platform=mac
https://apps.apple.com/us/app/microsoft-excel/id586683407?platform=mac - BehobenMicrosoft Loop for iOSmsrc_csaf
2.106.26020617:Security Update:https://apps.apple.com/us/app/microsoft-loop/id1637682491
https://apps.apple.com/us/app/microsoft-loop/id1637682491 - BehobenMicrosoft OneNote for Androidmsrc_csaf
16.0.19725.20142:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.onenote
https://play.google.com/store/apps/details?id=com.microsoft.office.onenote - BehobenMicrosoft OneNote for iOSmsrc_csaf
2.106.26020617:Security Update:https://apps.apple.com/us/app/microsoft-onenote/id410395246?platform=mac
https://apps.apple.com/us/app/microsoft-onenote/id410395246?platform=mac - BehobenMicrosoft Outlook for Androidmsrc_csaf
5.2605:Security Update:https://learn.microsoft.com/en-us/officeupdates/release-notes-outlook-mobile
https://learn.microsoft.com/en-us/officeupdates/release-notes-outlook-mobile - BehobenMicrosoft Outlook for Macmsrc_csaf
5.2605:Security Update:https://go.microsoft.com/fwlink/p/?linkid=831049
https://go.microsoft.com/fwlink/p/?linkid=831049 - BehobenMicrosoft Outlook for iOSmsrc_csaf
5.2605:Security Update:https://apps.apple.com/ca/app/microsoft-outlook/id951937596
https://apps.apple.com/ca/app/microsoft-outlook/id951937596 - BehobenMicrosoft PowerBI for Androidmsrc_csaf
2.2.260210.21290750:Security Update:https://play.google.com/store/search?q=powerbi&c=apps
https://play.google.com/store/search?q=powerbi&c=apps - BehobenMicrosoft PowerBI for iOSmsrc_csaf
1.2.260302.2193910:Security Update:https://apps.apple.com/us/app/microsoft-power-bi/id929738808
https://apps.apple.com/us/app/microsoft-power-bi/id929738808 - BehobenMicrosoft PowerPoint for Androidmsrc_csaf
16.0.19822.20038:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US
https://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US - BehobenMicrosoft PowerPoint for iOSmsrc_csaf
2.106.26020617:Security Update:https://apps.apple.com/us/app/microsoft-powerpoint/id586449534?platform=mac
https://apps.apple.com/us/app/microsoft-powerpoint/id586449534?platform=mac - BehobenMicrosoft Teams for Androidmsrc_csaf
1.0.0.2026043102:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.teams
https://play.google.com/store/apps/details?id=com.microsoft.teams - BehobenMicrosoft Teams for iOSmsrc_csaf
8.3.1:Security Update:https://apps.apple.com/us/app/microsoft-teams/id1113153706
https://apps.apple.com/us/app/microsoft-teams/id1113153706 - BehobenMicrosoft Word for Androidmsrc_csaf
16.0.19822.20038:Security Update:https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US
https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US - BehobenMicrosoft Word for iOSmsrc_csaf
2.106.26020617:Security Update:https://apps.apple.com/us/app/microsoft-word/id462054704?mt=12
https://apps.apple.com/us/app/microsoft-word/id462054704?mt=12
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–7.1
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (80)
Betroffene Produkte und Versionsbereiche.
- Microsoft 365 Copilot 365 Copilot's Business Chatalle Versionencert_bundDEcpe:/a:microsoft:365_copilot:-
- Microsoft Edge Android and iOS 145.3800.99alle Versionencert_bundDEcpe:/a:microsoft:edge:android_and_ios_145.3800.99
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2026-0717Microsoft 365 Copilot und Edge: Schwachstelle ermöglicht Offenlegung von Informationen und Manipulation von DatenDeutsch2026-03-12csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft 365 Copilot und Microsoft Edge ausnutzen, um sensible Informationen offenzulegen oder begrenzte Änderungen vorzunehmen.
- msrc_CVE-2026-26133M365 Copilot Information Disclosure Vulnerability2026-03-12csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
auch bekannt als (2)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (3)
Externe Belege — Patches, Meldungen, Analysen.
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan