Microsoft 365 Copilot
- Known vulnerabilities
- 28
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 9.8
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2026
Test a different version
| CVE |
|---|
|
CVE-2026-42831
Fixed
CRITICAL 7.8
Local Fixed in: 16.0.19822.20190
|
|
CVE-2026-40363
Fixed
CRITICAL 8.4
Local Fixed in: 16.0.19822.20190
|
|
CVE-2026-26134
Fixed
HIGH 7.8
Local Fixed in: 16.0.19822.20000
|
|
CVE-2026-26110
Fixed
CRITICAL 8.4
Local Fixed in: 16.0.19822.20000
|
|
CVE-2026-25180
Fixed
HIGH 5.5
Local Fixed in: 16.0.19822.20000
|
|
CVE-2026-24285
Fixed
HIGH 7.0
Local Fixed in: 16.0.19822.20000
|
|
CVE-2025-60724
Fixed
CRITICAL 9.8
Network Fixed in: 16.0.19426.20044
|
|
CVE-2025-59234
Fixed
CRITICAL 7.8
Local Fixed in: 16.0.19328.20000
|
|
CVE-2025-59227
Fixed
CRITICAL 7.8
Local Fixed in: 16.0.19328.20000
|
|
CVE-2025-53799
Fixed
CRITICAL 5.5
Local Fixed in: 16.0.19220.20000
|
|
CVE-2025-53766
Fixed
CRITICAL 9.8
Network Fixed in: 16.0.19127.20000
|
|
CVE-2025-53732
Fixed
HIGH 7.8
Local Fixed in: 16.0.19127.20000
|
|
CVE-2025-47167
Fixed
CRITICAL 8.4
Local Fixed in: 16.0.18925.20000
|
|
CVE-2025-30388
Fixed
HIGH 7.8
Local Fixed in: 16.0.18827.20000
|
|
CVE-2025-30386
Fixed
CRITICAL 8.4
Local Fixed in: 16.0.18827.20000
|
|
CVE-2025-26687
Fixed
HIGH 7.5
Network Fixed in: 16.0.18730.20000
|
|
CVE-2025-21338
Fixed
HIGH 7.8
Local Fixed in: 16.0.18429.20000
|
|
CVE-2023-36565
Fixed
HIGH 7.0
Local Fixed in: 16.0.16827.20138
|
10 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Security Score
Excellent
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
-
Open CVEs 0/-50
0 CVEs
-
Open KEVs 0/-40
0 KEVs
-
Vendor 0/-10
100% fresh
Context
Context
Description
Create content, explore ideas, and get answers with Copilot.
Data collected and shared
Source: Play Store Data Safety · 15 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by Microsoft Corporation
com.microsoft.emmx
msstore:9WZDNCRFJBBG
com.microsoft.crm.crmphone
com.microsoft.crm.crmphone.sales
msstore:9PMMSR1CGPWG
com.microsoft.LinkToWindowsFAQ
FAQ: Microsoft 365 Copilot
Does Microsoft 365 Copilot have known security vulnerabilities?
Microsoft 365 Copilot (com.microsoft.office.officehubrow) on Android has 28 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of Microsoft 365 Copilot affected by any open CVE?
Version 16.0.20326.20026 of Microsoft 365 Copilot on Android has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is Microsoft 365 Copilot affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Microsoft 365 Copilot (com.microsoft.office.officehubrow) is currently in the CISA KEV catalog.
What is the latest known version of Microsoft 365 Copilot?
The most recent version of Microsoft 365 Copilot (com.microsoft.office.officehubrow) tracked by Appaloosa Scout is 16.0.20326.20026, published by Microsoft Corporation.