Skip to content

CVE record · 2 sources

CVE-2026-50517

CVSS 9.9

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

Vendor: Microsoft
CVSS: 9.9

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

24

CVE NVD 24 Jul 2026

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

CVSS 9.9 CVE-2026-50517
8

Advisory MSRC 23 Jul 2026

CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

CVE-2026-50517 Microsoft