CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-58617 — Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized ...

·Source: NIST NVD

Updated:

Executive Summary

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.

Analysis

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network. CVSS Score: 8.1. Published: 2026-07-14T18:18:44.260.

Indicators of Compromise (1)

CVE (1)
CVE-2026-58617
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 14, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-63089 — WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographic...

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as the token is computed using CRC32 over a random value constrained to 0-999. Attackers can enumerate ca

CVE-2026-63089
NIST NVD
MEDIUMVulnerability

Program to rotate cyber personnel through federal agencies saw little use

The number of people who got approval to be in the Federal Rotational Cyber Workforce program was in the single digits, GAO found. The post Program to rotate cyber personnel through federal agencies saw little use appeared first on CyberScoop .

CyberScoop
MEDIUMVulnerability

New OkoBot framework deploys 20 payloads to steal data, crypto

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency wallet seed phrases, credentials, and other sensitive data. [...]

BleepingComputer