Product by Microsoft
Microsoft 365 Copilot for iOS
69 known vulnerabilities in Microsoft 365 Copilot for iOS (Microsoft), 0 of them actively exploited (CISA KEV).
Key figures
69
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
21
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2026-24301 | Microsoft Copilot Information Disclosure Vulnerability | 8.8 | |
| Critical | CVE-2025-53766 | GDI+ Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2025-60724 | GDI+ Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2025-32711 | M365 Copilot Information Disclosure Vulnerability | 9.3 | |
| Critical | CVE-2026-50517 | Microsoft M365 Copilot Remote Code Execution Vulnerability | 9.9 | |
| High | CVE-2025-30388 | Windows Graphics Component Remote Code Execution Vulnerability | 7.8 | |
| Critical | CVE-2021-43905 | Microsoft Office app Remote Code Execution Vulnerability | 9.6 | |
| Critical | CVE-2026-65770 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | 10.0 | |
| Critical | CVE-2026-65816 | Azure Arc Elevation of Privilege Vulnerability | 10.0 | |
| Critical | CVE-2026-68782 | Azure SQL Database Elevation of Privilege Vulnerability | 9.9 | |
| Critical | CVE-2026-68789 | Azure SQL Database Elevation of Privilege Vulnerability | 9.9 | |
| Critical | CVE-2026-54130 | M365 Copilot Information Disclosure Vulnerability | 9.8 | |
| Critical | CVE-2026-69400 | Azure Logic Apps Elevation of Privilege Vulnerability | 9.6 | |
| Critical | CVE-2026-85885 | Microsoft 365 Copilot Elevation of Privilege Vulnerability | 9.9 | |
| Critical | CVE-2026-69502 | Azure SQL Database Elevation of Privilege Vulnerability | 10.0 | |
| Critical | CVE-2026-69555 | Azure Arc Elevation of Privilege Vulnerability | 10.0 | |
| High | CVE-2026-69519 | Azure Stack HCI Information Disclosure Vulnerability | 8.6 | |
| High | CVE-2026-66800 | Azure Data Factory Information Disclosure Vulnerability | 8.6 | |
| Critical | CVE-2026-66309 | Azure SQL Database Elevation of Privilege Vulnerability | 9.1 | |
| Critical | CVE-2026-48561 | Microsoft Edge Copilot Remote Code Execution Vulnerability | 9.6 | |
| High | CVE-2026-85887 | M365 Copilot Information Disclosure Vulnerability | 7.7 | |
| High | CVE-2026-69419 | Azure Data Manager for Energy Remote Code Execution Vulnerability | 8.5 | |
| Critical | CVE-2026-41106 | Microsoft 365 Copilot Elevation of Privilege Vulnerability | 9.3 | |
| High | CVE-2026-69855 | Microsoft Copilot in Azure Information Disclosure Vulnerability | 7.7 | |
| Critical | CVE-2026-24307 | M365 Copilot Information Disclosure Vulnerability | 9.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- Microsoft Patches 22 Vulnerabilities, Including Critical RCE Flaw in Entra IDsans-newsbites-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 29sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28sans-atrisk-mail,
- NCSC-2026-0237 [1.02] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0237 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,