Product
Microsoft 365 Copilot Enterprise Search
- First Reported
- Jun 15, 2026
- Latest Reported
- Jun 15, 2026
Reported Context (3)
- Varonis Threat Labs uncovered SearchLeak, a one-click attack chain against Microsoft 365 Copilot Enterprise Search that could exfiltrate emails, calendar details, and indexed files through a trusted microsoft.com link. SearchLeak Flaw Could Expose Microsoft 365 Copilot Data With One Click
- In the first stage, the attack exploits a parameter-to-prompt (P2P) injection weakness by leveraging how Microsoft 365 Copilot Search accepts the ‘q’ URL parameter for search queries. SearchLeak Flaw Could Expose Microsoft 365 Copilot Data Through Crafted Links
- Varonis Threat Labs discovered SearchLeak, a three-stage attack chain that turns Microsoft 365 Copilot Enterprise Search into a silent data exfiltration path by combining P2P injection, an HTML rendering race condition, SearchLeak Research Details One-Click Data Exfiltration Chain in Microsoft 365 Copilot
CVE (2)
People (1)
MITRE ATT&CK (4)
Vendors (1)
Products (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.