CVE
CVE-2025-32711
- First Reported
- Aug 5, 2026
- Latest Reported
- Sep 3, 2026
Reported Context (2)
- One of the clearest examples is EchoLeak (CVE-2025-32711), disclosed in 2025 against Microsoft 365 Copilot. Researchers demonstrated that a crafted email could introduce malicious instructions into Copilot's context and Enterprise AI Agents’ Cyber Capabilities Make Governance and Access Controls Critical
- EchoLeak, tracked as CVE-2025-32711, is a major example. NVD classifies the issue as AI command injection in Microsoft 365 Copilot that could allow unauthorized information disclosure over a network. Research on AI Governance Must Address Data Exposure, Retrieval Risks and Prompt Injection
CVE (1)
People (2)
Vendors (7)
Products (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.