CVE-2025-32711
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- Microsoft 365 Copilot
- All versions
- CVSS 3.1
- 9.3 CRITICAL
- EPSS
- 7.4% (94th percentile)
- Weakness
- CWE-74
- NVD status
- Modified
- Published
- 2025-06-11
CVE-2025-32711 at NVD
5 known exploits for CVE-2025-32711
Proof-of-concept code and exploit modules indexed by Sploitus