CVE-2026-24299 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over…
Medium CVSS: 5.3

CVE-2026-24299

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Vendor
Microsoft
Product
365 Copilot
CWE
CWE-77
Yayın Tarihi
2026-03-19 21:17:00
Güncelleme
2026-03-24 17:19:45
Source Identifier
secure@microsoft.com
KEV Date Added
-

Kategoriler

CWE-77 365 Copilot MEDIUM Microsoft 2026

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24299