CVE-2025-26687

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26687 · Vendor Advisory

More vulnerabilities in 365 copilot

• CVE-2026-85881HIGH 8.0Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.
• CVE-2026-58617CRITICAL 9.8Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-42831HIGH 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-41614MEDIUM 6.2Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-41100MEDIUM 4.4Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.