Description
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
E
Unchanged
RL
O
RC
Changed
Affected products
- Microsoft / Microsoft 365 Copilot for Android1.0 – 16.0.19822.20190
- Microsoft / Microsoft Excel for Android16.0.0.0 – 16.0.19822.20190
- Microsoft / Microsoft Loop for Android1.0.0 – 16.0.19822.20190
- Microsoft / Microsoft OneNote for Android16.0.1 – 16.0.19822.20190
- Microsoft / Microsoft PowerPoint for Android16.0.0.0 – 16.0.19822.20190
- Microsoft / Microsoft Word for Android16.0.0.0 – 16.0.19822.20190