CVE-2026-58617

Microsoft · Published July 14, 2026

8.1

CVSS v3.1

HIGH

Patch availableGet patch

Description

M365 Copilot for iOS Elevation of Privilege Vulnerability. Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Microsoft 365 Copilot for iOS

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C