6.2
CVE-2026-41614
- EPSS 0.36%
- Veröffentlicht 12.05.2026 16:58:57
- Zuletzt bearbeitet 14.05.2026 14:25:16
- Quelle secure@microsoft.com
- CVE-Watchlists
- Unerledigt
LoginM365 Copilot for Desktop Spoofing Vulnerability
Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ 365 Copilot SwPlatformwindows Version < 19.2604.43111.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.28 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| secure@microsoft.com | 6.2 | 2.5 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41614