Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-22 | 1 | Disclosure1 |
| 2026-03-24 | 2 | Disclosure1Patch1 |
| 2026-03-26 | 1 | Disclosure1 |
| 2026-05-04 | 2 | General2 |
| 2026-05-05 | 3 | Disclosure3 |
| 2026-05-06 | 1 | Disclosure1 |
| 2026-05-09 | 1 | Disclosure1 |
| 2026-05-10 | 1 | General1 |
| 2026-05-12 | 1 | Disclosure1 |
| 2026-05-13 | 1 | General1 |
| 2026-07-05 | 1 | Disclosure1 |
| 2026-07-15 | 1 | Disclosure1 |
| 2026-08-24 | 1 | General1 |
DEF CON Singapore talk write-up on hacking Microsoft Copilot(s)(CVE-2026-24299) https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
A blog post about a DEF CON Singapore talk hacking Microsoft Copilot, citing CVE-2026-24299, is referenced, but no further technical or exploit details are provided.
Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) #llm #data exfiltration #prompt injection #copilot #spaiware https://t.co/yzcGqNvRBZ
Post summary
The tweet announces the discovery of CVE-2026-24299 at DEF CON, highlighting potential data exfiltration and prompt injection in Microsoft Copilot, but provides no PoC, exploit code, or patch information.
#exploit #AppSec "Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot", May 2026. ]-> https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365 // The presentation walks through a chain of vulns (CVE-2026-24299) across the M365 Copilot family, incl. data exfiltration via the HTML preview feature, Delayed Tool Invocation as an exploit reliability trick, hijacking long-term memory, and combining all of the above into a persistent backdoor
Post summary
The DEF CON presentation reveals multiple exploitation techniques around CVE‑2026‑24299 in Microsoft Copilot, detailing data exfiltration via HTML preview, delayed tool invocation, memory hijacking, and a persistent backdoor.
Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) #security https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
A DEF CON talk titled 'Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)' is announced, but no specific technical details, PoC, or evidence of active exploitation are provided in the brief.
Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) #security https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
The post announces discovery of CVE-2026-24299 in Microsoft Copilot during DEF CON but provides no further details on exploitation, patching, or the vulnerability’s technical aspects.
#securityupdate #microsoft #定例外 2026. 3.19 M365 Copilot の情報漏えいの脆弱性 CVE-2026-24299 Security Vulnerability リリース日: - マイクロソフト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24299
Post summary
The tweet announces Microsoft’s CVE‑2026‑24299 for M365 Copilot data leakage and includes a link to the official Microsoft patch advisory, without providing a PoC, exploit code, or evidence of active exploitation.
@TheHackersNews Great research and thanks for the shout out to SpAIware. 😈 Recently I presented a persistent data exfil chain with M365 Copilot at DEF CON Singapore that got fixed (CVE-2026-24299) Check it out: https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
The tweet notes that CVE‑2026‑24299 in M365 Copilot has been fixed, but it provides no technical or exploit details beyond a reference to a blog post.
Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) #security https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
The text announces a new vulnerability (CVE-2026-24299) discussed in a DEF CON talk, without providing PoC, exploit details, patches, or technical specifics.
Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) · Embrace The Red https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
The blog post title announces a DEF CON talk about CVE‑2026‑24299 in Microsoft Copilot, indicating a disclosure event but offering no further technical or exploit detail.
📝 New article: Copirate 365: How DEF CON Researchers Exploited Microsoft Copilot (CVE-2026-24299) https://moltx.io/articles/ad854c56-e68d-4dfc-a249-63453ccb6a7f
Post summary
An article reports that DEF CON researchers have demonstrated exploitation of a newly disclosed Microsoft Copilot vulnerability (CVE‑2026‑24299), but no PoC, exploit code, or patches are mentioned.
#securityupdate #microsoft #定例外 CVE-2026-24299 Security Vulnerability 影響: 情報漏えい 最大深刻度: 緊急 CVSS:3.1 5.3 / 4.6 悪用可能性 ・一般に公開: No ・悪用: No ・Exploitability assessment: 対象外 https://x.com/kawn2020/status/2036262758447272162
Post summary
The tweet announces CVE-2026-24299 as a high‑severity information‑leak vulnerability, providing impact details and CVSS scores but making no mention of PoC, exploits, or mitigations.
@NahamSec @wunderwuzzi23 wild how this was assigned cve-2026-24299 after defcon
Post summary
The tweet merely questions the timing of the CVE assignment, lacking detailed technical or exploitation information.
Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) #security https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
The tweet announces a talk about CVE-2026-24299 but provides no concrete details on PoC, exploits, patches, or technical specifics.
M365 Copilot CVE-2026-24299: AI systems can exfiltrate data unexpectedly, raising trust concerns in security practices. https://zpr.io/beV5j84J6vtw
Post summary
The snippet announces that M365 Copilot (CVE-2026-24299) can unexpectedly exfiltrate data, highlighting trust concerns.
Copirate 365 at DEF CON: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299) #security https://embracethered.com/blog/posts/2026/defcon-talk-copirate-365/
Post summary
This tweet announces a DEF CON talk on CVE‑2026‑24299 affecting Microsoft Copilot, but provides no technical details, exploit code, or patch information.
CVE-2026-24299 | M365 Copilot Information Disclosure Vulnerability https://www.aakashrahsi.online/post/cve-2026-24299 https://t.co/2rWTRUFICk
Post summary
A new CVE (CVE-2026-24299) affecting M365 Copilot is reported as an information disclosure vulnerability, with a link to a blog post for details.
CVE-2026-24299 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a net… https://www.cve.org/CVERecord?id=CVE-2026-24299
Post summary
The message announces CVE-2026-24299, identifying it as a command injection flaw in Microsoft 365 Copilot, with no mention of PoC, exploitation, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_copilot | - | - | - |