Severity
High
Analysis Summary
CVE-2025-53787 CVSS:8.2
Microsoft 365 Copilot Business Chat could allow a remote attacker to obtain sensitive information, caused by a command injection vulnerability.
CVE-2025-53774 CVSS:6.5
Microsoft 365 Copilot Business Chat could allow a remote attacker to obtain sensitive information, caused by a command injection vulnerability.
Impact
- Information Disclosure
Indicators of Compromise
CVE
CVE-2025-53787
CVE-2025-53774
Affected Vendors
- Microsoft
Affected Products
- Microsoft 365 Copilot Business Chat
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.