← Back to browse · API

CVE-2025-32711

Severity
CRITICAL
CVSS
9.3
EPSS
0.07961
Risk score
39.99
CISA KEV
No
PoC
No
Published
2025-06-11
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-18114, GHSA-H2W9-P5QF-QMRH
Products
Microsoft:Microsoft 365 Copilot -
Sources
euvd EUVD-2025-18114

Description

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

References