Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-80098

Copilot Studio Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Copilot Studio
CVE-2024-43610

Copilot Studio Information Disclosure Vulnerability

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

CVSS 3.1 · 7.4 High EPSS 1.0% KEV · Not listed
Vendors
Microsoft
Products
Copilot Studio
CVE-2026-21520

Copilot Studio Information Disclosure Vulnerability

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Copilot Studio
CVE-2024-38206

Microsoft Copilot Studio Information Disclosure Vulnerability

An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network.

CVSS 3.1 · 8.5 High EPSS 12.3% KEV · Not listed
Vendors
Microsoft
Products
Copilot Studio
CVE-2024-49038

Microsoft Copilot Studio Elevation Of Privilege Vulnerability

Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.

CVSS 3.1 · 9.3 Critical EPSS 1.0% KEV · Not listed
Vendors
Microsoft
Products
Copilot Studio