CVE-2023-36565: Microsoft 365 Copilot

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Microsoft Office Graphics Elevation of Privilege Vulnerability

Affected products

• Microsoft 365 Copilot: before 16.0.16827.20138 (fixed in 16.0.16827.20138)
• Microsoft Office: before 16.0.14326.21606 (fixed in 16.0.14326.21606); version 2019 only
• Microsoft Office Long Term Servicing Channel: version 2021 only

Published 2023-10-10. Last modified 2026-06-17.