What Happened
Critical Flaws Put Sensitive Information At Risk
Microsoft has disclosed and fully remediated three critical information disclosure vulnerabilities affecting Microsoft 365 Copilot and Copilot Chat in Microsoft Edge. The vulnerabilities, which were disclosed on May 7, 2026, carry a Critical severity rating and fall under the Information Disclosure impact category. According to CyberSecurityNews, Microsoft has already fully mitigated all three flaws on its end, consistent with its cloud CVE transparency initiative.