Microsoft: >> 365 Copilot Security Vulnerabilities
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVSS Score
9.3
EPSS Score
0.074
Published
2025-06-11
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.005
Published
2025-06-10
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.006
Published
2025-06-10
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.006
Published
2025-06-10
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.007
Published
2025-06-10
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.006
Published
2025-05-13
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.039
Published
2025-05-13
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
7.5
EPSS Score
0.011
Published
2025-04-08
Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.007
Published
2024-09-10
Microsoft Office Graphics Elevation of Privilege Vulnerability
CVSS Score
7.0
EPSS Score
0.004
Published
2023-10-10