Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-02 | 1 | Disclosure1 |
| 2026-07-03 | 2 | Disclosure1Patch1 |
| 2026-07-05 | 1 | Patch1 |
| 2026-07-31 | 1 | General1 |
#securityupdate #microsoft #定例外 2026. 7. 2 Microsoft 365 Copilot Elevation of Privilege Vulnerability CVE-2026-41106 Security Vulnerability リリース日: - マイクロソフト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41106
Post summary
Microsoft issued a security update (CVE-2026-41106) for an elevation‑of‑privilege flaw in Microsoft 365 Copilot, with the advisory providing minimal technical detail.
🚨CRITICAL - M365 Copilot Open Redirect (CVE-2026-41106) A URL redirection to untrusted site ('open redirect') vulnerability in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. The root cause is improper handling of redirect URLs, which can be exploited to trick users into visiting malicious sites or facilitate further attacks such as phishing or session hijacking. 👉Affected: M365 Copilot (affected versions prior to the latest security update) Action: Apply the latest security updates from Microsoft.
Post summary
Microsoft warns of a critical open‑redirect vulnerability in M365 Copilot that could enable privilege elevation, and urges users to apply the latest security updates.
CVE-2026-41106 Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-41106
Post summary
The post announces a new open‑redirect vulnerability in M365 Copilot that could lead to privilege escalation, but provides no proof of exploitation or mitigation.
CVE-2026-41106: Microsoft 365 Copilot Open Redirect Privilege Escalation - What It Means for Your Business and How to Respond https://hubs.li/Q04rynRZ0
Post summary
The text references CVE-2026-41106, describing an open redirect privilege escalation in Microsoft 365 Copilot, but offers no concrete PoC, exploit code, or patch information.
#CVE-2026-41106 - Critical open redirect in #M365 #Copilot. Unpatched. #CVSS 9.3. Attackers can elevate privileges via URL redirection. Update immediately. #CVEAlert #Microsoft #infosec #cybersecuritytips #cybersecurity #sysadmin #devops More FREE INFO: https://www.valtersit.com/cve/CVE-2026-41106/
Post summary
CVE-2026-41106 is a critical, unpatched open‑redirect vulnerability in Microsoft 365 Copilot (CVSS 9.3) that requires immediate vendor patching.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | 365_copilot | - | - | - |