sign in--:--:--UTC

CVE-2026-42824

exploited in the wild☆ pin

CVSS

7.5

Reports

4

First seen

Jun 9, 2026

Last seen

Jun 22, 2026

Affected product

Microsoft 365 Copilot Enterprise Search

Associated actors

Recent reports

Check Point Threat Intelligence Report – 22 June 2026

Check Point ResearchJun 22, 2026 High

Microsoft 365 Copilot Enterprise Search One-Click Flaw Enabled Unauthorized Data Exfiltration

The Hacker NewsJun 15, 2026 Critical

SearchLeak: Critical Microsoft 365 Copilot vulnerability enables 1-click data theft

Bleeping ComputerJun 15, 2026 Critical

Microsoft Patch Tuesday June 2026 – 206 vulnerabilities including 32 critical RCE flaws

Cisco TalosJun 9, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans