NetSight
high8.1

CVE-2026-58617

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.

Impact

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.

Affected products

VendorProductAffected versions
Microsoft365 Copilot
before 2.111.4
MicrosoftMicrosoft 365 Copilot For IOS
from 1.0 before 2.111.4

Weakness classification

References