on April 23, 2026 at 2:00 pm — CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability

Written by Privacy Trust April 23, 2026

Url redirection to untrusted site (‘open redirect’) in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

Related Blog