CVE-2026-42824Patch(microsoft / copilot)

CRITICALCVSS 7.5 · HIGH

Exploitation observed; activity peaked at 22 mentions and remains active

Immediate actions

Patch microsoft copilot systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

microsoft CVEs Back to dashboard

8.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42824

Weakness type (CWE)

CWE-77

Priority

CRITICAL

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

DECLINING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

copilot

Threat summary

Active exploitation appears in 12 classified signals
Public PoC and exploit tooling are both present
Patch or workaround signal is available
70 mentions across 23 observed days

What's happening

Active exploitation reported across 12 signals
Exploit tool or code specified in 2 signals
PoC mentioned or linked in 8 signals
Patch or workaround mentioned in 31 signals
Technical details provided in 43 signals
Disclosure: 19 classified signals
Peaked 20d ago at 22 mentions (2026-06-16); latest day: 1
70 total mentions across 23 days

Affected systems

Vendors

microsoft

Products

copilot

1 version affected across 1 product

Deep dive

Activity timeline70 mentions / 23d

Signal classification7 categories

Patch

2231.4%

Disclosure

1927.1%

Active Exploitation

1115.7%

General

1115.7%

PoC

45.7%

Exploit

22.9%

Referenced assets43 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-10	1	Disclosure1
2026-06-15	15	Active Exploitation2Disclosure5Patch8
2026-06-16	22	Active Exploitation5Disclosure4Exploit1General5Patch7
2026-06-17	4	Active Exploitation1Disclosure1General2
2026-06-18	4	Active Exploitation1Disclosure2Disclousre1
2026-06-19	4	Active Exploitation1Disclosure1Exploit1Patch1
2026-06-20	1	Patch1
2026-06-22	2	Patch2
2026-06-23	1	Disclosure1
2026-06-24	1	Disclosure1
2026-06-29	2	General2
2026-06-30	2	PoC2
2026-07-01	1	General1
2026-07-04	1	Patch1
2026-07-05	1	Disclosure1
2026-07-08	1	Active Exploitation1
2026-07-13	1	Disclosure1
2026-07-14	1	PoC1
2026-07-16	1	General1
2026-08-05	1	Patch1
2026-08-17	1	PoC1
2026-08-19	1	Patch1
2026-09-08	1	Disclosure1

Full discourse20 posts

ɐpnH@0x0Huda130d
Exploit
CVE-2026-42824 (SearchLeak) - Technical Breakdown & Exploitation Mechanics Exploit Chain: 1. P2P Injection: Weaponized 'http://microsoft.com' URL injects a hidden prompt into Copilot’s context. 2. Context Abuse: Copilot queries the tenant (SharePoint/Exchange) for sensitive tokens and MFA codes. 3. HTML Injection: Exploits a race condition in the rendering loop to inject an un-sanitized <img> tag before guardrails trigger. 4. SSRF Exfiltration: The <img> tag forces data exfiltration via the Bing backend to an external listener. Full Analysis: https://thehackernews.com/2026/06/one-click-microsoft-365-copilot-flaw.html
Post summary
The post outlines a detailed exploit chain for CVE-2026‑42824, covering injection vectors, context abuse, race condition exploitation, and SSRF exfiltration, but offers no PoC or evidence of real‑world use.
220042223.0K
762 followersView on X
Harjit Dhaliwal@Hoorge131d
Active Exploitation
New attack turned Microsoft 365 Copilot into 1-click data theft tool. Good read and Microsoft has mitigated this with CVE-2026-42824 - https://www.bleepingcomputer.com/news/security/new-attack-turned-microsoft-365-copilot-into-1-click-data-theft-tool/ #CyberSecurity #Copilot #Windows #Patching #Security https://t.co/GrWlweY0x0
Post summary
The tweet highlights a newly discovered attack that turns Microsoft 365 Copilot into a 1‑click data theft tool, reporting that Microsoft has mitigated the issue with CVE‑2026‑42824. No PoC or exploit code is linked, but the attack is implied to be in use.
06037264.4K
8.6K followersView on X
ボス@サイバーセキュリティの専門家@boss_sec_labo129d
General
クリック一発でメールもパスワードも抜かれる。今日のニュースは「便利と守り」が揃って裏口になった日だ。・Microsoft365 Copilotに「SearchLeak」CVE-2026-42824、ワンクリックでメール・パスワード窃取・Fortinet FortiSandboxのCVE-2026-39813ほか、実環境で認証回避と任意コマンド実行・IoT基盤ThingsBoardにプロトタイプ汚染CVE-2026-53676、CVSS8.6で任意コード実行・キヤノンEOS Network Setting Toolに5件、FTP通信の認証情報窃取の恐れ便利だから、守りの製品だからと信頼で思考を止めていないか。君の現場で一番疑われていない入口はどこだ？
Post summary
The post lists several CVEs with brief vulnerability descriptions but offers no PoC, exploit code, or patch information, indicating a general awareness rather than an actionable threat.
07038174.5K
1.5K followersView on X
情報の灯台@joho_no_todai131d
Patch
Microsoft 365 Copilotの企業向け検索に、リンク1クリックでメール・予定表・OneDrive・SharePointが外部に流出する脆弱性チェーンが見つかった。 CVE-2026-42824、深刻度はCritical。攻撃を構成する3つの欠陥はいずれも古典的なバグで、単体では致命的にならない。それがCopilotという「社内データの検索窓口」を経由した瞬間、被害範囲が一変する。 Microsoftは修正済みで対応不要だが、この構造自体は残り続ける。 https://joho-todai.com/microsoft-365-copilot-data-leak-vulnerability/
Post summary
The article reports a critical vulnerability (CVE‑2026‑42824) in Microsoft 365 Copilot that could leak internal data, but Microsoft has already released a fix and users need not take further action.
0702132.0K
11.4K followersView on X
ɐpnH@AlAssaf_H130d
General
https://www.cve.org/CVERecord?id=CVE-2026-42824
Post summary
The provided text is merely a link to a CVE record page, lacking any explicit details about proof‑of‑concept, exploitation, mitigation, or technical specifics.
11076187
762 followersView on X
Rıdvan Yağlı@ridvanyagli130d
Active Exploitation
Copilot one-click data exfiltration güvenlik açığı (CVE-2026-42824) Saldırgan, kurbanın e-postasına bir link gönderiyor. Linke tıklandığında Copilot çalışıyor. E-postalar, MFA/2FA kodları, SharePoint/OneDrive dosyaları saldırganın sunucusuna gönderiliyor https://t.co/E0CMavhnZc
Post summary
CVE-2026-42824 enables attackers to exfiltrate emails, MFA/2FA codes, and SharePoint/OneDrive files by sending a malicious link that triggers Copilot, indicating real‑world exploitation.
10082550
1.7K followersView on X
transilienceai@transilienceai127d
Exploit
A link that points to http://microsoft.com shouldn't be able to empty your inbox. SearchLeak (CVE-2026-42824) did exactly that, with a single click. The trick: the search query in the URL gets run as a prompt, telling Copilot to pull your email, files, calendar, even MFA codes. An image tag in the reply fires before the sanitizer catches it, and the data slips out through a Bing fetch that's already on the allowlist. No payload, no fake domain, so nothing trips your filters. Patched now, but it's the 3rd bug of this shape in 2 years, we have done a full analysis of this pattern and curated a report. Link: https://github.com/transilienceai/communitytools/blob/update/attack_stories/threat_intel_case_studies/searchleak/report.md
Post summary
SearchLeak CVE-2026-42824 was successfully exploited via a crafted URL that leveraged Copilot to exfiltrate data; the issue is now patched.
02120123
331 followersView on X
Md Ismail Šojal 🕷️@0x0SojalSec130d
Patch
CVE-2026-42824 uncovered SearchLeak a critical vulnerability chain in Microsoft 365 Copilot Enterprise that could turn a single click into full data exfiltration. Using parameter-to-prompt injection & browser rendering tricks & Bing as a relay, attackers could pull sensitive M365 data the victim already had access to. emails, MFA codes, meeting notes, and SharePoint OneDrive files all silently exfiltrated. Microsoft patched it quickly, Important lesson as AI adoption grows: classic web issues & powerful AI assistants new attack surfaces. https://x.com/IntCyberDigest/status/2066653191794512285/video/1
Post summary
The tweet outlines a critical threat chain in Microsoft 365 Copilot Enterprise that allows data exfiltration via injection techniques and confirms that Microsoft has promptly patched the vulnerability.
00032604
51.9K followersView on X
navanem@navanem130d
Disclosure
SearchLeak Vulnerability in Microsoft 365 Copilot Enables One-Click Data Theft CVE-2026-42824 chains three flaws to exfiltrate emails, passwords, and… Read more: https://www.navanem.com/news/searchleak-vulnerability-in-microsoft-365-copilot-enables-one-click-da-mqfda8mf #Microsoft365 #Copilot #Cve #DataExfiltration
Post summary
The text announces CVE-2026-42824, describing it as a Chain of three flaws in Microsoft 365 Copilot that can exfiltrate emails and passwords, but provides no PoC, exploit code, or patch details.
0104013
5 followersView on X
Ben Rothke@benrothke116d
PoC
The @varonis Threat Labs teams demonstrated that enterprise #AI assistants can be turned into a precision data exfiltration tool via a crafted link. #CVE-2026-42824, AKA #SearchLeak is a huge vulnerability chain in Microsoft 365 Copilot. HT HT @Kiteworks. https://cybersec.kiteworks.com/s/microsoft-365-copilot-searchleak-cve-2026-42824-when-your-ai-assistant-becomes-an-exfiltration-tool-28248
Post summary
Varonis Threat Labs demonstrated that Microsoft 365 Copilot can be abused by crafted links to exfiltrate data, highlighting the #CVE-2026-42824 vulnerability chain.
00040224
9.0K followersView on X
InfoSecSherpa 🏔️@InfoSecSherpa100d
General
Read this insight from Patrick Spencer of Kiteworks from June 23, 2026. "Microsoft 365 Copilot SearchLeak (CVE-2026-42824): When Your #AI Assistant Becomes an Exfiltration Tool" 🫨 https://cybersec.kiteworks.com/s/microsoft-365-copilot-searchleak-cve-2026-42824-when-your-ai-assistant-becomes-an-exfiltration-tool-28388 https://t.co/MK0wzzalhM
Post summary
The tweet announces an upcoming insight about the Microsoft 365 Copilot SearchLeak CVE-2026-42824 but offers no concrete technical details, exploitation evidence, or remediation information.
01011489
51.5K followersView on X
Sebastien Gioria@SPoint108d
Active Exploitation
Un simple lien vers http://microsoft.com. Un clic. Et vos emails, vos codes MFA, vos documents SharePoint partent chez l'attaquant.C'est SearchLeak (CVE-2026-42824), 👉 L'article complet : https://bit.ly/4p6u1OF #CyberSecurity #AISecurity #M365Copilot #PromptInjection #SSRF
Post summary
CVE-2026-42824, termed SearchLeak, is actively being exploited via a simple Microsoft link, enabling attackers to steal emails, MFA codes, and SharePoint documents. No patch or mitigation details are provided.
00030114
2.3K followersView on X
su8 / denchu@__su888129d
Active Exploitation
M365 Copilot Enterpriseの脆弱性連鎖「SearchLeak」(CVE-2026-42824)をVaronisが報告。プロンプト注入、HTML競合、BingのSSRFを連鎖し、リンクのクリックだけでメールやOneDriveを窃取 / New attack turned Microsoft 365 Copilot into 1-click data theft tool https://www.bleepingcomputer.com/news/security/new-attack-turned-microsoft-365-copilot-into-1-click-data-theft-tool/
Post summary
The article reports that CVE‑2026‑42824, part of a chain called SearchLeak, is actively exploited in M365 Copilot, allowing attackers to steal email and OneDrive data with a single link click.
00030172
879 followersView on X
RIFFSEC@getriffsec130d
Disclosure
🚨 Copilot i jeden klik Ci z Was, którzy śledzą CVE i mają czas, być może już to załatali, ale znane są w końcu szczegóły CVE-2026-42824 (04.06), czyli podatności nazwanej SearchLeak. Varonis opisał łańcuch błędów w Microsoft 365 Copilot Enterprise, który pozwalał zamienić zaufany link z domeny Microsoftu w narzędzie do eksfiltracji danych. Scenariusz był nieprzyjemnie prosty: użytkownik klikał link, Copilot wykonywał spreparowane zapytanie, a dane z firmowego środowiska mogły zostać wyprowadzone na zewnątrz. W grę wchodziły dane, do których użytkownik miał dostęp przez Copilota: wiadomości e-mail, kody MFA/OTP, szczegóły spotkań, notatki, dokumenty oraz pliki z SharePoint i OneDrive. Bez przejęcia konta, bez instalowania malware i bez drugiego kliknięcia. Technicznie problem polegał na połączeniu kilku elementów: command injection w M365 Copilot, zaufanego kontekstu Microsoft Search, renderowania odpowiedzi i obejścia ograniczeń CSP. To kolejny przykład, że asystent AI w firmie nie jest tylko „chatbotem”, ale warstwą dostępu do danych, wyszukiwania i automatyzacji. Microsoft załatał podatność, a NVD opisuje ją jako błąd klasy command injection umożliwiający nieautoryzowanemu atakującemu ujawnienie informacji przez sieć. CVSS 3.1: 8.1 High, przy wymaganej interakcji użytkownika. Varonis i media branżowe opisują jednak praktyczny wpływ jako krytyczny, bo przy enterprise Copilocie jeden klik mógł wystarczyć do wyciągania bardzo wrażliwych danych. Jak macie chwilkę😅sprawdźcie nie tylko sam patch status, ale też to, jakie dane są indeksowane przez Copilota, kto ma do nich dostęp i czy w organizacji istnieje realna kontrola uprawnień do SharePoint, OneDrive, poczty i notatek ze spotkań. Źródła: Varonis, NVD, BleepingComputer, The Hacker News
Post summary
The post announces the discovery and description of CVE-2026-42824, a command‑injection flaw in Microsoft 365 Copilot, and confirms that Microsoft has issued a patch.
00030445
3.0K followersView on X
Ozanne Cadet 🇪🇺 🇫🇷 📈@syskb46d
Disclosure
@arikouts @_c_samy @vinceflibustier La faille CVE-2026-42824 alias SearchLeak permettait de voler e-mails, fichiers et codes 2FA depuis Microsoft 365 Copilot Enterprise via une simple URL piégée. Varonis a signalé la chaîne…. https://ayinedjimi-consultants.fr/news/searchleak-cve-2026-42824-copilot-vol-donnees
Post summary
The post announces CVE‑2026‑42824, noting its ability to exfiltrate emails, files, and 2FA codes via a simple URL, but offers no PoC, exploit details, patch, or evidence of real‑world exploitation.
00110107
1.3K followersView on X
Davin Jackson@Djax_Alpha117d
General
Microsoft 365 Copilot SearchLeak (CVE-2026-42824): When Your AI Assistant Becomes an Exfiltration Tool https://cybersec.kiteworks.com/s/microsoft-365-copilot-searchleak-cve-2026-42824-when-your-ai-assistant-becomes-an-exfiltration-tool-28242/1
Post summary
The provided snippet announces a new CVE involving Microsoft 365 Copilot SearchLeak but offers no further technical details or evidence of exploitation.
00110256
9.1K followersView on X
Zero Hunt@zerohuntai123d
Disclosure
Same Copilot, second June running: a prompt injection in a link makes M365 Copilot read your mailbox and exfiltrate it through a Bing proxy your CSP already trusts. EchoLeak→SearchLeak. The bug class is structural. https://zerohunt.ai/blog/copilot-searchleak-prompt-injection-cve-2026-42824/ #PromptInjection #AISecurity https://t.co/whd5rRaGE4
Post summary
The post highlights a prompt‑injection vulnerability (CVE‑2026‑42824) in Microsoft 365 Copilot that could lead to mailbox data exfiltration through a trusted Bing proxy, referencing a blog entry for more details.
0002026
15 followersView on X
Aseem Shrey@AseemShrey126d
Patch
Full credit: Dolev Taler at Varonis Threat Labs discovered SearchLeak. CVE-2026-42824, rated critical by Microsoft, patched server-side. 🛡️ Deep dive + defense guide: http://varonis.com/blog/searchleak
Post summary
Varonis Threat Labs announced the discovery of CVE-2026-42824 SearchLeak, classified as critical by Microsoft and already patched server‑side, with a defense guide linked for further details.
10010138
8.6K followersView on X
Divinmentis@Divinmentis126d
Patch
🔐 Enterprise AI data watch: Varonis says SearchLeak showed how Microsoft 365 Copilot could become a one-click data-exposure path before Microsoft patched CVE-2026-42824. #AI #Cybersecurity #Microsoft365 https://t.co/semHi6sI3G
Post summary
The tweet alerts that before Microsoft patched CVE‑2026‑42824, Varonis’s SearchLeak revealed a one‑click data‑exposure path via Microsoft 365 Copilot.
2000057
25 followersView on X
Daily CyberSecurity@the_yellow_fall128d
Disclosure
Varonis found SearchLeak, a critical Copilot vulnerability chain (CVE-2026-42824) letting one click leak emails, MFA codes, and files. #SearchLeak #Copilot #CVE202642824 #AIsecurity #PromptInjection https://meterpreter.org/searchleak-copilot-vulnerability https://t.co/Jr7cFp8sVv
Post summary
The tweet announces a new Copilot vulnerability (CVE‑2026‑42824) called SearchLeak that allows sensitive data to be leaked with a single click, with a link potentially hosting more details.
00020274
12.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	copilot	-	-	-

Explore more

Back to dashboard microsoft CVEs copilot vulnerabilities

What researchers are saying

CVE-2026-42824

ɐpnH[verified]@0x0HudaExploit

The post outlines a detailed exploit chain for CVE-2026‑42824, covering injection vectors, context abuse, race condition exploitation, and SSRF exfiltration, but offers no PoC or evidence of real‑world use.

Harjit Dhaliwal[verified]@HoorgeActive Exploitation

The tweet highlights a newly discovered attack that turns Microsoft 365 Copilot into a 1‑click data theft tool, reporting that Microsoft has mitigated the issue with CVE‑2026‑42824. No PoC or exploit code is linked, but the attack is implied to be in use.

ボス@サイバーセキュリティの専門家[verified]@boss_sec_laboGeneral

The post lists several CVEs with brief vulnerability descriptions but offers no PoC, exploit code, or patch information, indicating a general awareness rather than an actionable threat.

情報の灯台[verified]@joho_no_todaiPatch

The article reports a critical vulnerability (CVE‑2026‑42824) in Microsoft 365 Copilot that could leak internal data, but Microsoft has already released a fix and users need not take further action.

ɐpnH[verified]@AlAssaf_HGeneral

The provided text is merely a link to a CVE record page, lacking any explicit details about proof‑of‑concept, exploitation, mitigation, or technical specifics.

Rıdvan Yağlı[verified]@ridvanyagliActive Exploitation

CVE-2026-42824 enables attackers to exfiltrate emails, MFA/2FA codes, and SharePoint/OneDrive files by sending a malicious link that triggers Copilot, indicating real‑world exploitation.

transilienceai[verified]@transilienceaiExploit

SearchLeak CVE-2026-42824 was successfully exploited via a crafted URL that leveraged Copilot to exfiltrate data; the issue is now patched.

Md Ismail Šojal 🕷️[verified]@0x0SojalSecPatch

The tweet outlines a critical threat chain in Microsoft 365 Copilot Enterprise that allows data exfiltration via injection techniques and confirms that Microsoft has promptly patched the vulnerability.