PT-2025-41484 · Microsoft · M365 Copilot

Es7Evam + 1 · Published 2025-10-09 · Updated 2025-11-22 · CVE-2025-59252

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot (affected versions not specified)

Description A spoofing issue exists in Microsoft 365 Copilot. The vulnerability allows for potential misrepresentation of Copilot’s responses, potentially leading to user confusion or deception.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-59252

Affected Products

M365 Copilot

References · 8

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59252 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59252 · Security Note
• https://t.me/cveNotify/139171 · Telegram Post
• https://twitter.com/the_c_protocol/status/1992329759196365252 · Twitter Post
• https://t.me/cveNotify/143680 · Telegram Post
• https://t.me/msrcreports/2289 · Telegram Post
• https://roboshadow.com/blog/patch-tuesday-october-2025 · Reddit Post
• https://t.me/msrcreports/2180 · Telegram Post