microsoft 365 copilot
productUScpe:2.3:a:microsoft:365_copilot:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
by severity
3critical12high0medium0low
updated 2026-10-28
01
vulnerabilities (54)
Related CVEs.
showing 50 of 54
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-416Use After Free14 CVEs
- CWE-122Heap-based Buffer Overflow9 CVEs
- CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')8 CVEs
- CWE-787Out-of-bounds Write5 CVEs
- CWE-843Access of Resource Using Incompatible Type ('Type Confusion')4 CVEs
- CWE-284Improper Access Control3 CVEs
- CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
- CWE-121Stack-based Buffer Overflow2 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE54 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan