Critical Microsoft 365 Copilot Vulnerabilities Expose sensitive Information (opens in new tab)

Microsoft has disclosed and fully remediated three critical information disclosure vulnerabilities affecting Microsoft 365 Copilot and Copilot Chat in Microsoft Edge, all released on May 7, 2026, requiring no action from end users or administrators.