Changeflow GovPing Data Privacy & Cybersecurity Microsoft 365 Copilot Vulnerabilities Advisory
Priority review Notice Added Final

Microsoft 365 Copilot Vulnerabilities Advisory

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published March 19th, 2026
Detected March 20th, 2026
Email

Summary

CERT-Bund has issued an advisory regarding multiple vulnerabilities in Microsoft 365 Copilot, with a CVSS base score of 8.9. These vulnerabilities could allow remote attackers to disclose information, manipulate data, and gain elevated privileges. Mitigation measures are available.

View original document View source feed page

What changed

CERT-Bund has released an advisory (WID-SEC-2026-0795) detailing multiple critical vulnerabilities affecting Microsoft 365 Copilot and Microsoft 365 Copilot BizChat. The vulnerabilities have a high CVSS base score of 8.9 and a temporal score of 7.7. Exploitation could lead to unauthorized information disclosure, data manipulation, and privilege escalation.

Organizations utilizing Microsoft 365 Copilot should review the advisory and implement available mitigation strategies to protect their systems. The advisory indicates that remote attacks are possible, and prompt action is recommended to address the security risks associated with these vulnerabilities.

What to do next

  1. Review CERT-Bund advisory WID-SEC-2026-0795 for detailed vulnerability information.
  2. Implement available mitigation measures for Microsoft 365 Copilot.
  3. Assess potential impact of vulnerabilities on data confidentiality and integrity.

Source document (simplified)

[WID-SEC-2026-0795] Microsoft 365 Copilot: Mehrere Schwachstellen CVSS Base Score 8.9 (hoch) CVSS Temporal Score 7.7 (hoch) Remoteangriff ja Datum 19.03.2026 Stand 20.03.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • Sonstiges
  • Windows

Produktbeschreibung

Microsoft Copilot ist ein KI-Assistent, der in verschiedene Microsoft-Produkte integriert werden kann.

Produkte

19.03.2026
- Microsoft 365 Copilot

  • Microsoft 365 Copilot BizChat

Angriff

Angriff

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Microsoft 365 Copilot ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und erweiterte Berechtigungen zu erlangen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Related changes

Favicon for wid.cert-bund.de Google Chrome Vulnerabilities (CVSS 8.8)
Priority review Mar 20, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de Oracle Fusion Middleware Vulnerability Allows Code Execution
Urgent Mar 20, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de Atlassian Bamboo Data Center Vulnerability Allows Code Execution
Priority review Mar 20, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for changeflow.com Bluefin Payment Systems Vaultless Tokenization and Encryption System
Routine Mar 23, 2026 • ChangeBridge: EPO Bulletin - Business Methods (G06Q) • Banking & Finance
Favicon for changeflow.com USPTO Patent Application for Digital Identification Creation and Use
Routine Mar 23, 2026 • ChangeBridge: Patent Apps - Business Methods (G06Q) • Banking & Finance
Favicon for changeflow.com USPTO Machine Learning DNS Monitoring Patent Application
Routine Mar 23, 2026 • ChangeBridge: Patent Apps - Business Methods (G06Q) • Banking & Finance

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-Bund
Published
March 19th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
WID-SEC-2026-0795

Who this affects

Applies to
Technology companies
Industry sector
5112 Software & Technology
Activity scope
AI Assistant Integration Data Security
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Artificial Intelligence Data Security

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 228 Consumer Protection 40 Courts & Legal 312 Data Privacy & Cybersecurity 62 Defense & National Security 48 Education 20 Energy 104 Environment 83 Government & Legislation 258 Healthcare 131 Housing 15 Immigration 9 Insurance 55 Labor & Employment 110 Legal & Courts 1 Pharma & Drug Safety 97 Securities & Markets 77 Tax 62 Telecom & Technology 47 Trade & Sanctions 124 Transportation 56

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.