CVE-2026-85887
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
Sep 18, 2026
Vendor
unknown
Description
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.