medium4.4
CVE-2026-41100
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
Impact
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Copilot | before 16.0.19822.20190 |