Microsoft 365 Copilot
- Known vulnerabilities
- 1
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 7.8
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2025 · limited CPE coverage for this vendor — absence of recent CVEs is not a guarantee
Test a different version
| CVE |
|---|
|
CVE-2025-21338
Fixed
HIGH 7.8
Local Fixed in: 2.93.24123014
|
Security Score
Excellent
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
-
Open CVEs 0/-50
0 CVEs
-
Open KEVs 0/-40
0 KEVs
-
Vendor 0/-10
100% fresh
Context
Context
Description
The Microsoft 365 Copilot app is your AI-first productivity app for work. It provides one place for you to chat with your AI assistant1, create content, manage projects and quickly find files on the go – helping you get more done, without doing more. With the Microsoft 365 Copilot mobile app, you can (1): • Chat with your AI assistant – Ask Copilot to create or summarize a document, draft an email or analyze a spreadsheet using natural language. • Interact with voice – Talk to Copilot to help you prepare for your day, get answers and brainstorm ideas. • Find what matters fast – Find the strategy deck you were working on recently, or a file that was attached to an email. • Accelerate your learning – Ask Copilot to explain a concept, summarize recent trends or help you prepare for a presentation. • Get expert insights – Use built-in AI agents like Researcher and Analyst to generate research reports and analyze complex datasets. • Create polished content– Create and edit images, posters, banners, surveys and more with easy-to-use templates.
Data collected and shared
Source: App Store · App Privacy · 7 data item(s) declared
Indicative classification based on data sensitivity. "Shared" = transmitted to third parties (publisher-declared).
Other apps by this publisher
Apps published by Microsoft Corporation
com.microsoft.emmx
msstore:9WZDNCRFJBBG
com.microsoft.crm.crmphone
com.microsoft.crm.crmphone.sales
msstore:9PMMSR1CGPWG
com.microsoft.LinkToWindowsFAQ
FAQ: Microsoft 365 Copilot
Does Microsoft 365 Copilot have known security vulnerabilities?
Microsoft 365 Copilot (com.microsoft.officemobile) on iOS has 1 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of Microsoft 365 Copilot affected by any open CVE?
Version 2.113 of Microsoft 365 Copilot on iOS has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is Microsoft 365 Copilot affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Microsoft 365 Copilot (com.microsoft.officemobile) is currently in the CISA KEV catalog.
What is the latest known version of Microsoft 365 Copilot?
The most recent version of Microsoft 365 Copilot (com.microsoft.officemobile) tracked by Appaloosa Scout is 2.113, published by Microsoft Corporation.