CVE-2026-50517: Unsafe deserialization in M365 Copilot
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Disclosed 24 July 2026 · Record updated 13 September 2026
Impact
Authorized attacker can execute code over a network through unsafe deserialization
Our coverage
No articles linked to this incident yet.
Sources
- nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-50517
