Security NewsHighIncidentvulnerability
CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability
UnknownApr 23, 2026(12 days ago)
M365 Copilot has an elevation of privilege vulnerability due to an open redirect, allowing unauthorized privilege escalation.
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Related CVEs
Potentially Affected Vendors
Microsoft Azure
Vendors are matched automatically based on AI analysis. Verify with official sources.