Vulnerability Details CVE-2026-26133
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 46.1%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2026-26133
-
cpe:2.3:a:microsoft:365_copilot:-
-
cpe:2.3:a:microsoft:365_copilot:16.0.16026.20172
-
cpe:2.3:a:microsoft:365_copilot:16.0.16130.20156
-
cpe:2.3:a:microsoft:365_copilot:16.0.16827.20138
-
cpe:2.3:a:microsoft:365_copilot:16.0.18730.20000
-
cpe:2.3:a:microsoft:365_copilot:16.0.18827.20000
-
cpe:2.3:a:microsoft:365_copilot:16.0.18925.20000
-
cpe:2.3:a:microsoft:365_copilot:16.0.19127.20000
-
cpe:2.3:a:microsoft:365_copilot:16.0.19220.20000
-
cpe:2.3:a:microsoft:365_copilot:16.0.19328.20000
-
cpe:2.3:a:microsoft:365_copilot:16.0.19426.20044
-
cpe:2.3:a:microsoft:365_copilot:2.103.0
-
cpe:2.3:a:microsoft:365_copilot:2.103.1
-
cpe:2.3:a:microsoft:365_copilot:2.103.2
-
cpe:2.3:a:microsoft:365_copilot:2.103.3
-
cpe:2.3:a:microsoft:365_copilot:2.103.4
-
cpe:2.3:a:microsoft:365_copilot:2.104
-
cpe:2.3:a:microsoft:365_copilot:2.104.1
-
cpe:2.3:a:microsoft:365_copilot:2.104.2
-
cpe:2.3:a:microsoft:365_copilot:2.104.3
-
cpe:2.3:a:microsoft:365_copilot:2.104.4
-
cpe:2.3:a:microsoft:365_copilot:2.104.5
-
cpe:2.3:a:microsoft:365_copilot:2.105
-
cpe:2.3:a:microsoft:365_copilot:2.105.1
-
cpe:2.3:a:microsoft:365_copilot:2.106
-
cpe:2.3:a:microsoft:365_copilot:2.106.1
-
cpe:2.3:a:microsoft:365_copilot:2.106.2
-
cpe:2.3:a:microsoft:365_copilot:2.106.3
-
cpe:2.3:a:microsoft:365_copilot:2.107
-
cpe:2.3:a:microsoft:365_copilot:2.107.1
-
cpe:2.3:a:microsoft:edge:-
-
cpe:2.3:a:microsoft:edge:108.0.1462.42
-
cpe:2.3:a:microsoft:edge:112.0.1722.34
-
cpe:2.3:a:microsoft:edge:114.0.1823.82
-
cpe:2.3:a:microsoft:edge:118.0.2088.88
-
cpe:2.3:a:microsoft:edge:122.0.2365.52
-
cpe:2.3:a:microsoft:edge:122.0.2365.63
-
cpe:2.3:a:microsoft:edge:122.0.2365.92
-
cpe:2.3:a:microsoft:edge:126.0.2592.56
-
cpe:2.3:a:microsoft:edge:130.0.2849.52
-
cpe:2.3:a:microsoft:edge:130.0.2849.57
-
cpe:2.3:a:microsoft:edge:130.0.2849.68
-
cpe:2.3:a:microsoft:edge:130.0.2849.80
-
cpe:2.3:a:microsoft:edge:130.0.2949.46
-
cpe:2.3:a:microsoft:edge:131.0.2903.101
-
cpe:2.3:a:microsoft:edge:131.0.2903.107
-
cpe:2.3:a:microsoft:edge:131.0.2903.112
-
cpe:2.3:a:microsoft:edge:131.0.2903.113
-
cpe:2.3:a:microsoft:edge:131.0.2903.125
-
cpe:2.3:a:microsoft:edge:131.0.2903.134
-
cpe:2.3:a:microsoft:edge:131.0.2903.145
-
cpe:2.3:a:microsoft:edge:131.0.2903.48
-
cpe:2.3:a:microsoft:edge:131.0.2903.54
-
cpe:2.3:a:microsoft:edge:131.0.2903.68
-
cpe:2.3:a:microsoft:edge:131.0.2903.77
-
cpe:2.3:a:microsoft:edge:131.0.2903.87
-
cpe:2.3:a:microsoft:edge:132.0.2957.118
-
cpe:2.3:a:microsoft:edge:132.0.2957.122
-
cpe:2.3:a:microsoft:edge:132.0.2957.129
-
cpe:2.3:a:microsoft:edge:133.0.3065.54
-
cpe:2.3:a:microsoft:edge:133.0.3065.65
-
cpe:2.3:a:microsoft:edge:133.0.3065.67
-
cpe:2.3:a:microsoft:edge:133.0.3065.80
-
cpe:2.3:a:microsoft:edge:133.0.3065.92
-
cpe:2.3:a:microsoft:edge:134.0.3124.105
-
cpe:2.3:a:microsoft:edge:134.0.3124.51
-
cpe:2.3:a:microsoft:edge:134.0.3124.57
-
cpe:2.3:a:microsoft:edge:134.0.3124.68
-
cpe:2.3:a:microsoft:edge:134.0.3124.77
-
cpe:2.3:a:microsoft:edge:134.0.3124.95
-
cpe:2.3:a:microsoft:edge:135.0.3179.54
-
cpe:2.3:a:microsoft:edge:135.0.3179.72
-
cpe:2.3:a:microsoft:edge:135.0.3179.85
-
cpe:2.3:a:microsoft:edge:135.0.3179.98
-
cpe:2.3:a:microsoft:edge:136.0.3240.50
-
cpe:2.3:a:microsoft:edge:136.0.3240.61
-
cpe:2.3:a:microsoft:edge:136.0.3240.64
-
cpe:2.3:a:microsoft:edge:136.0.3240.71
-
cpe:2.3:a:microsoft:edge:136.0.3240.76
-
cpe:2.3:a:microsoft:edge:136.0.3240.77
-
cpe:2.3:a:microsoft:edge:136.0.3240.91
-
cpe:2.3:a:microsoft:edge:137.0.3296.53
-
cpe:2.3:a:microsoft:edge:137.0.3296.65
-
cpe:2.3:a:microsoft:edge:137.0.3296.82
-
cpe:2.3:a:microsoft:edge:137.0.3296.92
-
cpe:2.3:a:microsoft:edge:138.0.3351.109
-
cpe:2.3:a:microsoft:edge:138.0.3351.121
-
cpe:2.3:a:microsoft:edge:138.0.3351.55
-
cpe:2.3:a:microsoft:edge:138.0.3351.66
-
cpe:2.3:a:microsoft:edge:138.0.3351.70
-
cpe:2.3:a:microsoft:edge:138.0.3351.77
-
cpe:2.3:a:microsoft:edge:138.0.3351.83
-
cpe:2.3:a:microsoft:edge:138.0.3351.98
-
cpe:2.3:a:microsoft:edge:139.0.3405.101
-
cpe:2.3:a:microsoft:edge:139.0.3405.102
-
cpe:2.3:a:microsoft:edge:139.0.3405.111
-
cpe:2.3:a:microsoft:edge:139.0.3405.125
-
cpe:2.3:a:microsoft:edge:139.0.3405.86
-
cpe:2.3:a:microsoft:edge:140.0.3485.52
-
cpe:2.3:a:microsoft:edge:140.0.3485.71
-
cpe:2.3:a:microsoft:edge:140.0.3485.81
-
cpe:2.3:a:microsoft:edge:140.0.3485.94
-
cpe:2.3:a:microsoft:edge:140.0.3485.98
-
cpe:2.3:a:microsoft:edge:141.0.3537.72
-
cpe:2.3:a:microsoft:edge:141.0.3537.85
-
cpe:2.3:a:microsoft:edge:141.0.3537.91
-
cpe:2.3:a:microsoft:edge:141.0.3537.99
-
cpe:2.3:a:microsoft:edge:142.0.3595.107
-
cpe:2.3:a:microsoft:edge:142.0.3595.58
-
cpe:2.3:a:microsoft:edge:142.0.3595.66
-
cpe:2.3:a:microsoft:edge:142.0.3595.80
-
cpe:2.3:a:microsoft:edge:142.0.3595.93
-
cpe:2.3:a:microsoft:edge:142.0.3595.95
-
cpe:2.3:a:microsoft:edge:143.0.3650.112
-
cpe:2.3:a:microsoft:edge:143.0.3650.125
-
cpe:2.3:a:microsoft:edge:143.0.3650.130
-
cpe:2.3:a:microsoft:edge:143.0.3650.139
-
cpe:2.3:a:microsoft:edge:143.0.3650.66
-
cpe:2.3:a:microsoft:edge:143.0.3650.72
-
cpe:2.3:a:microsoft:edge:143.0.3650.77
-
cpe:2.3:a:microsoft:edge:143.0.3650.82
-
cpe:2.3:a:microsoft:edge:143.0.3650.88
-
cpe:2.3:a:microsoft:edge:143.0.3650.97
-
cpe:2.3:a:microsoft:edge:144.0.3719.103
-
cpe:2.3:a:microsoft:edge:144.0.3719.115
-
cpe:2.3:a:microsoft:edge:144.0.3719.81
-
cpe:2.3:a:microsoft:edge:144.0.3719.91
-
cpe:2.3:a:microsoft:edge:144.0.3719.99
-
cpe:2.3:a:microsoft:edge:145.0.3800.85
-
cpe:2.3:a:microsoft:edge:145.0.3800.92
-
cpe:2.3:a:microsoft:edge:145.0.3800.99
-
cpe:2.3:a:microsoft:excel:-
-
cpe:2.3:a:microsoft:excel:2.102.1
-
cpe:2.3:a:microsoft:excel:2.102.2
-
cpe:2.3:a:microsoft:excel:2.102.3
-
cpe:2.3:a:microsoft:excel:2.102.4
-
cpe:2.3:a:microsoft:excel:2.103
-
cpe:2.3:a:microsoft:excel:2.103.1
-
cpe:2.3:a:microsoft:excel:2.103.2
-
cpe:2.3:a:microsoft:excel:2.103.3
-
cpe:2.3:a:microsoft:excel:2.103.4
-
cpe:2.3:a:microsoft:excel:2.104
-
cpe:2.3:a:microsoft:excel:2.104.1
-
cpe:2.3:a:microsoft:excel:2.104.2
-
cpe:2.3:a:microsoft:excel:2.105
-
cpe:2.3:a:microsoft:excel:2.105.1
-
cpe:2.3:a:microsoft:excel:2.105.2
-
cpe:2.3:a:microsoft:excel:2.105.3
-
cpe:2.3:a:microsoft:excel:2.105.4
-
cpe:2.3:a:microsoft:excel:2.106
-
cpe:2.3:a:microsoft:excel:2.106.1
-
cpe:2.3:a:microsoft:loop:2.100
-
cpe:2.3:a:microsoft:loop:2.101
-
cpe:2.3:a:microsoft:loop:2.102.1
-
cpe:2.3:a:microsoft:loop:2.103
-
cpe:2.3:a:microsoft:loop:2.104
-
cpe:2.3:a:microsoft:loop:2.105
-
cpe:2.3:a:microsoft:loop:2.86
-
cpe:2.3:a:microsoft:loop:2.87
-
cpe:2.3:a:microsoft:loop:2.88
-
cpe:2.3:a:microsoft:loop:2.89
-
cpe:2.3:a:microsoft:loop:2.89.1
-
cpe:2.3:a:microsoft:loop:2.90
-
cpe:2.3:a:microsoft:loop:2.91.2
-
cpe:2.3:a:microsoft:loop:2.91.3
-
cpe:2.3:a:microsoft:loop:2.92
-
cpe:2.3:a:microsoft:loop:2.93
-
cpe:2.3:a:microsoft:loop:2.94
-
cpe:2.3:a:microsoft:loop:2.94.1
-
cpe:2.3:a:microsoft:loop:2.95
-
cpe:2.3:a:microsoft:loop:2.96
-
cpe:2.3:a:microsoft:loop:2.97
-
cpe:2.3:a:microsoft:loop:2.98
-
cpe:2.3:a:microsoft:loop:2.99
-
cpe:2.3:a:microsoft:onenote:-
-
cpe:2.3:a:microsoft:onenote:16.0.16026.20158
-
cpe:2.3:a:microsoft:outlook:-
-
cpe:2.3:a:microsoft:outlook:3.12.0
-
cpe:2.3:a:microsoft:outlook:3.13.0
-
cpe:2.3:a:microsoft:outlook:3.14.0
-
cpe:2.3:a:microsoft:outlook:3.15.0
-
cpe:2.3:a:microsoft:outlook:3.16.0
-
cpe:2.3:a:microsoft:outlook:3.17.0
-
cpe:2.3:a:microsoft:outlook:3.17.1
-
cpe:2.3:a:microsoft:outlook:3.18.0
-
cpe:2.3:a:microsoft:outlook:3.20.0
-
cpe:2.3:a:microsoft:outlook:3.21.0
-
cpe:2.3:a:microsoft:outlook:3.22.0
-
cpe:2.3:a:microsoft:outlook:3.22.1
-
cpe:2.3:a:microsoft:outlook:3.23.0
-
cpe:2.3:a:microsoft:outlook:3.24.0
-
cpe:2.3:a:microsoft:outlook:3.24.1
-
cpe:2.3:a:microsoft:outlook:3.25.0
-
cpe:2.3:a:microsoft:outlook:3.26.0
-
cpe:2.3:a:microsoft:outlook:3.27.0
-
cpe:2.3:a:microsoft:outlook:3.27.1
-
cpe:2.3:a:microsoft:outlook:3.28.0
-
cpe:2.3:a:microsoft:outlook:3.29.0
-
cpe:2.3:a:microsoft:outlook:3.30.0
-
cpe:2.3:a:microsoft:outlook:3.31.0
-
cpe:2.3:a:microsoft:outlook:3.32.0
-
cpe:2.3:a:microsoft:outlook:3.33.0
-
cpe:2.3:a:microsoft:power_bi:-
-
cpe:2.3:a:microsoft:power_bi:2.2.260114.21286639
-
cpe:2.3:a:microsoft:power_bi:2.2.260127.21288693
-
cpe:2.3:a:microsoft:powerpoint:-
-
cpe:2.3:a:microsoft:powerpoint:2.102.2
-
cpe:2.3:a:microsoft:powerpoint:2.102.3
-
cpe:2.3:a:microsoft:powerpoint:2.102.4
-
cpe:2.3:a:microsoft:powerpoint:2.103
-
cpe:2.3:a:microsoft:powerpoint:2.103.1
-
cpe:2.3:a:microsoft:powerpoint:2.103.2
-
cpe:2.3:a:microsoft:powerpoint:2.103.3
-
cpe:2.3:a:microsoft:powerpoint:2.103.4
-
cpe:2.3:a:microsoft:powerpoint:2.104
-
cpe:2.3:a:microsoft:powerpoint:2.104.2
-
cpe:2.3:a:microsoft:powerpoint:2.105
-
cpe:2.3:a:microsoft:powerpoint:2.105.1
-
cpe:2.3:a:microsoft:powerpoint:2.105.2
-
cpe:2.3:a:microsoft:powerpoint:2.105.3
-
cpe:2.3:a:microsoft:powerpoint:2.105.4
-
cpe:2.3:a:microsoft:powerpoint:2.106
-
cpe:2.3:a:microsoft:powerpoint:2.106.1
-
cpe:2.3:a:microsoft:teams:-
-
cpe:2.3:a:microsoft:teams:1.0.0.2023070204
-
cpe:2.3:a:microsoft:teams:1.0.0.2024022302
-
cpe:2.3:a:microsoft:teams:1.0.0.2025102802
-
cpe:2.3:a:microsoft:teams:1.0.0.2025112902
-
cpe:2.3:a:microsoft:teams:5.12.1
-
cpe:2.3:a:microsoft:teams:6.19.2
-
cpe:2.3:a:microsoft:teams:7.10.1
-
cpe:2.3:a:microsoft:teams:7.13.0
-
cpe:2.3:a:microsoft:teams:7.18.0
-
cpe:2.3:a:microsoft:teams:7.18.1
-
cpe:2.3:a:microsoft:teams:7.18.2
-
cpe:2.3:a:microsoft:teams:7.19.0
-
cpe:2.3:a:microsoft:teams:7.19.1
-
cpe:2.3:a:microsoft:teams:7.20.0
-
cpe:2.3:a:microsoft:teams:7.21.0
-
cpe:2.3:a:microsoft:teams:7.21.1
-
cpe:2.3:a:microsoft:teams:7.22.0
-
cpe:2.3:a:microsoft:teams:7.22.1
-
cpe:2.3:a:microsoft:teams:7.22.2
-
cpe:2.3:a:microsoft:teams:7.23.0
-
cpe:2.3:a:microsoft:teams:7.23.1
-
cpe:2.3:a:microsoft:teams:7.23.2
-
cpe:2.3:a:microsoft:teams:8.1.0
-
cpe:2.3:a:microsoft:teams:8.1.1
-
cpe:2.3:a:microsoft:teams:8.2.0
-
cpe:2.3:a:microsoft:teams:8.2.1
-
cpe:2.3:a:microsoft:teams:8.2.2
-
cpe:2.3:a:microsoft:teams:8.3.0
-
cpe:2.3:a:microsoft:word:-
-
cpe:2.3:a:microsoft:word:16.0.10228.20049
-
cpe:2.3:a:microsoft:word:16.0.10325.20043
-
cpe:2.3:a:microsoft:word:16.0.10730.20043
-
cpe:2.3:a:microsoft:word:16.0.10827.20078
-
cpe:2.3:a:microsoft:word:16.0.11001.20049
-
cpe:2.3:a:microsoft:word:16.0.11001.20074
-
cpe:2.3:a:microsoft:word:16.0.11029.20056
-
cpe:2.3:a:microsoft:word:16.0.11126.20063
-
cpe:2.3:a:microsoft:word:16.0.11231.20088
-
cpe:2.3:a:microsoft:word:16.0.11328.20080
-
cpe:2.3:a:microsoft:word:16.0.11425.20132
-
cpe:2.3:a:microsoft:word:16.0.11601.20074
-
cpe:2.3:a:microsoft:word:16.0.11629.20124
-
cpe:2.3:a:microsoft:word:16.0.11727.20104
-
cpe:2.3:a:microsoft:word:16.0.11901.20110
-
cpe:2.3:a:microsoft:word:16.0.11929.20198
-
cpe:2.3:a:microsoft:word:16.0.12026.20174
-
cpe:2.3:a:microsoft:word:16.0.12130.20208
-
cpe:2.3:a:microsoft:word:16.0.12228.20260
-
cpe:2.3:a:microsoft:word:16.0.12325.20174
-
cpe:2.3:a:microsoft:word:16.0.12430.20120
-
cpe:2.3:a:microsoft:word:16.0.12527.20090
-
cpe:2.3:a:microsoft:word:16.0.12624.20254
-
cpe:2.3:a:microsoft:word:16.0.12730.20182
-
cpe:2.3:a:microsoft:word:16.0.12730.20214
-
cpe:2.3:a:microsoft:word:16.0.12827.20140
-
cpe:2.3:a:microsoft:word:16.0.8730.2050
-
cpe:2.3:a:microsoft:word:16.0.8827.2054
-
cpe:2.3:a:microsoft:word:16.0.9001.2077
-
cpe:2.3:a:microsoft:word:16.0.9029.2068
-
cpe:2.3:a:microsoft:word:16.0.9126.2069
-
cpe:2.3:a:microsoft:word:16.0.9226.2077
-
cpe:2.3:a:microsoft:word:16.0.9330.2060
-
cpe:2.3:a:microsoft:word:16.0.9330.2080
-
cpe:2.3:a:microsoft:word:2.102.1
-
cpe:2.3:a:microsoft:word:2.102.2
-
cpe:2.3:a:microsoft:word:2.102.3
-
cpe:2.3:a:microsoft:word:2.102.4
-
cpe:2.3:a:microsoft:word:2.103
-
cpe:2.3:a:microsoft:word:2.103.1
-
cpe:2.3:a:microsoft:word:2.103.2
-
cpe:2.3:a:microsoft:word:2.103.3
-
cpe:2.3:a:microsoft:word:2.103.4
-
cpe:2.3:a:microsoft:word:2.104
-
cpe:2.3:a:microsoft:word:2.104.1
-
cpe:2.3:a:microsoft:word:2.104.2
-
cpe:2.3:a:microsoft:word:2.105
-
cpe:2.3:a:microsoft:word:2.105.1
-
cpe:2.3:a:microsoft:word:2.105.2
-
cpe:2.3:a:microsoft:word:2.105.4
-
cpe:2.3:a:microsoft:word:2.106
-
cpe:2.3:a:microsoft:word:2.106.1