oM noM Security Feeds cve
vulnerability context

CVE-2026-42824

CVSS 6.5 MEDIUMEPSS 94%CWE-77

Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Published 2026-06-04 · last modified 2026-06-19

details

CISA KEV status
Not in catalog
CVSS v3
6.5 / MEDIUM
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
94% percentile (score 0.0764)
CWE
CWE-77
View on NVD → · cve.org

source mentions 2

source consensus

  • Bluesky1×
  • MSRC Update Guide1×
Want the 3-bullet summary of CVE-2026-42824, plus webhook alerts when KEV is updated? Pro is $10/mo.
Open in readerSee Pro →