CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. EPSS 0.01 CVE-2026-41106 Microsoft US Microsoft Security · 2. 7. 16:00