Product
Copilot Agent
- First Reported
- Mar 11, 2026
- Latest Reported
- Apr 19, 2026
Reported Context (2)
- Microsoft patched CVE-2026-26144, a cross-site scripting flaw in Excel that chains to Copilot Agent and enables silent, clickless exfiltration of spreadsheet data to attacker-controlled endpoints. Excel XSS Could Let Copilot Agent Exfiltrate Spreadsheet Data, Opinion Warns
- CVE-2026-26144 is a critical Excel information disclosure that can weaponize Copilot Agent for zero-click data exfiltration. Microsoft’s March 2026 Patch Tuesday Fixes 79 Vulnerabilities, Including Two Disclosed Zero-Days
CVE (6)
People (2)
Vendors (1)
Products (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.