Product:
M365 Copilot for Desktop
Summary
Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally. This vulnerability can lead to significant security risks if exploited. Attackers can gain unauthorized access and impersonate legitimate users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-41614 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging improper access controls, the attacker can perform spoofing attacks, potentially gaining unauthorized privileges and access to sensitive information.
Affected Products
- M365 Copilot for Desktop: Vulnerable to local spoofing attacks due to improper access control.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, restricting local access to sensitive systems can help prevent unauthorized exploitation.