PoC Index

CVE-2025-32711

CRITICAL 9.3EPSS 7.4%

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVSS v3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1
9.3 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
EPSS
7.42% chance of exploitation in the next 30 days, 94th percentile
Published
2025-06-11
Updated
2026-02-26

Proof-of-concept exploits (2)

References

Related