Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4594 articles · 258037 vulns · 37/41 feeds (7d)
← Back to list
9.3
CVE-2026-80098PATCHED
microsoft · copilot_studio

Copilot Studio Elevation of Privilege Vulnerability

Description

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.

Affected Products

VendorProductVersions
microsoftcopilot_studio-

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftazurecert_advisory90%
microsoft365 copilotcert_advisory90%
microsoftentracert_advisory90%
microsoftmicrosoft azure cosmos dbcert_advisory90%
microsoftofficecert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80098(vendor-advisory, patch)

Related News (7 articles)

Tier E
Hacker News3h ago
Live CVE Feed to Keep Your Agent Up to Speed
→ No new info (linked only)
Tier B
BSI Advisories51d ago
[NEU] [hoch] Microsoft Office Produkte: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
Cisco Talos52d ago
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
→ No new info (linked only)
Tier C
Rapid7 Blog52d ago
Patch Tuesday - September 2026
→ No new info (linked only)
Tier B
BSI Advisories56d ago
[NEU] [hoch] Microsoft Clouddienste: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB57d ago
CVE-2026-80098 | Microsoft Copilot Studio privileges management
→ No new info (linked only)
Tier A
Microsoft MSRC57d ago
CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.3 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80098
CWECWE-347
PublishedSep 3, 2026
Last enriched57d ago
Trending Score71
Source articles7
Independent6
Info Completeness7/14
Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 155
CRITICALCVE-2026-70352
Azure AI Language Elevation of Privilege Vulnerability
Trending: 71
CRITICALCVE-2026-83711
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Trending: 68
CRITICALCVE-2026-69595
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Trending: 63
HIGHCVE-2026-83498
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Trending: 61

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 3, 2026
Discovered by ZDM
Sep 3, 2026
Patch Available
Oct 14, 2026