Description
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft 365 Copilot for Android
1.0 to < 16.0.19815.10000affected
Microsoft Microsoft 365 Copilot for iOS
1.0 to < 2.107.2affected
Microsoft Microsoft Edge for Android
1.0.0 to < 145.3800.99affected
Microsoft Microsoft Edge for iOS
1.0.0.0 to < 145.3800.99affected
Microsoft Microsoft Excel for Android
16.0.0.0 to < 16.0.19822.20038affected
Microsoft Microsoft Excel for iOS
1.0 to < 2.106.26020617affected
Microsoft Microsoft Loop for iOS
2.0.0 to < 2.106.26020617affected
Microsoft Microsoft OneNote
1.0.0 to < 2.106.26020617affected
Microsoft Microsoft OneNote for Android
16.0.1 to < 16.0.19725.20142affected
Microsoft Microsoft Outlook for Android
1.0 to < 5.2605affected
Microsoft Microsoft Outlook for iOS
1.0.0 to < 5.2605affected
Microsoft Microsoft Outlook for Mac
1.0.0 to < 5.2605affected
Microsoft Microsoft PowerBI for Android
2.0.0 to < 2.2.260210.21290750affected
Microsoft Microsoft PowerBI for iOS
1.0.0 to < 1.2.260302.2193910affected
Microsoft Microsoft PowerPoint for Android
16.0.0.0 to < 16.0.19822.20038affected
Microsoft Microsoft PowerPoint for iOS
1.0 to < 2.106.26020617affected
Microsoft Microsoft Teams for Android
1.0.0 to < 1.0.0.2026043102affected
Microsoft Microsoft Teams for iOS
2.0.0 to < 8.3.1affected
Microsoft Microsoft Word for Android
16.0.0.0 to < 16.0.19822.20038affected
Microsoft Microsoft Word for iOS
2.0.0 to < 2.106.26020617affected