critical9.9
CVE-2026-50517
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Impact
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Copilot | All versions |
| Microsoft | Microsoft 365 Copilot | All versions Version - |