CyberRota Analysis
AI-GeneratedMicrosoft 365 Copilot for iOS is vulnerable due to improper access control, enabling unauthorized attackers to elevate their privileges remotely. This flaw poses a significant risk to organizations using this application, as it could lead to unauthorized access to sensitive data and functionalities. Enterprises utilizing Microsoft 365 Copilot should prioritize addressing this vulnerability to mitigate potential exploitation.
CVE
CVE-2026-58617
Severity
HIGH
CVSS
8.1
EPSS
0.74%
Microsoft
Original NVD Description
Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
Related CVEs
Other vulnerabilities affecting the same vendor(s)