Threats tagged 'ghsa-qvcj-rgrx-wm72'

CVE-2026-26164 is a vulnerability in M365 Copilot involving improper neutralization of special elements in output used by a downstream component, leading to injection. This flaw allows an unauthorized attacker to disclose information over a network without requiring privileges or user interaction. The vulnerability has a high severity with a CVSS score of 7.5.