High nvd · CVE-2026-47645

CVE-2026-47645: Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized atta

Published Jun 19, 2026 CVSS 8.8

Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.

Affected AI Products

copilot

View original source

Get the weekly digest. Every Monday: top AI security stories of the week. Free.