Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-41100

No fix known EPSS <1%CVSS 4.4

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

Published 2026-05-12 · CVE record · OSV

Products: Microsoft 365 Copilot for Android, Microsoft Excel for Android, Microsoft Loop for Android, Microsoft OneNote for Android, Microsoft PowerPoint for Android, Microsoft Word for Android