Page 1 of 1

CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability

Posted: Thu Apr 23, 2026 3:00 pm
by admin
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

Source: https://msrc.microsoft.com/update-guide ... 2026-33102