Product:
M365 Copilot
Summary
M365 Copilot has a spoofing vulnerability that could allow an attacker to impersonate a user. This vulnerability can lead to unauthorized access to sensitive information. User interaction is required for exploitation, making it essential for users to be cautious.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-59252 |
Exploitation
To exploit this vulnerability, an attacker must trick a user into interacting with a malicious link or content that appears legitimate. Once the user engages with the spoofed content, the attacker can gain unauthorized access to the user’s information or impersonate them within the system.
Affected Products
- M365 Copilot: A productivity tool that assists users in generating content and automating tasks, which is vulnerable to spoofing attacks.
Mitigation
To mitigate this vulnerability, users should be vigilant about the links and content they interact with. Implementing security awareness training and ensuring that users are informed about the risks of spoofing can help reduce the likelihood of exploitation.