CERT-In flags critical security vulnerabilities in Microsoft 365 Copilot

If the issue is not resolved soon, it can allow attackers to execute arbitrary code, steal sensitive information, and cause denial of services on affected systems.

Microsoft 365 Copilot is one of the most popular online productivity service on all platforms worwide.

With Microsoft 365, users can access any of the files, projects or PowerPoint presentations in any remote places with just an internet connectivity.

However, it also attracts cyber criminals to target people to steal personal information such as bank statements or even company's trade secrets for ransom. While users are advised to be cautious while on internet, it also the job of service providers to have strong security to prevent data breaches. But, some time, due to unintentional oversight by the engineer, leave security loopholes in applications.

In the latest instance, two vulnerabilities-- CVE-2026-42827 and CVE-2026-41090-- deemed critical has been detected in Microsoft 365 Copilot, state-run Indian Computer Emergency Response Teame (CERT-In).

CERT-In noted that Microsoft's product has issues with input validation, there is authentication weakness, authorisation isses and command handling flaws.

If the issue is not resolved soon, it can allow attackers to execute arbitrary code, steal sensitive information, cause denial of services on affected systems and also there is high risk of disruption of cloud services.

Besides Microsoft 365 Copilot, there are security issues in other major products including Microsoft Global Secure Acces (GSA), Microsoft Entra ID, Microsoft Planetary Computer Pro (GeoCatalog), Azure Stack ACI, Resource Managed, Virtual Network Gateway, Privileged Identity Management (PIM), Microsoft Power Pages and Azure Orbital Spatio.

Microsoft has acknowledged the security vulnerabilities in services and has rolled out updates. Users are advised to update to the latest version.

Here's how to update your Microsoft 365 apps:

Step 1: Open any of Microsoft 365 application (such as Word, Excel, or PowerPoint)

Step 2: Click File in the top-left corner, then select Account (or Office Account) from the menu.

Step 3: Under the Product Information section; click Update Options.

Ste 4: Select Update Now. (If you don't see this, click Enable Updates first).

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.