Security Advisory

CVE-2026-33102

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-23 21:35:48

Last updated 2026-05-12 17:37:46

Assigner microsoft

State PUBLISHED

Url redirection to untrusted site (open redirect) in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.