CVE-2026-24301
Named by 3 kept items in this workspace.
Search every workspace for CVE-2026-24301. It matches the name as written, so it can find other things that share it.
The items that name it 3
CoSnitch: three chained flaws in a consumer AI assistant — an undocumented autorun parameter combined with an existing query parameter runs an attacker-supplied prompt on page load with no user gesture (prompt completes even if victim closes tab); reaches OAuth-connected mail, drive, and calendar da
CoSnitch, Microsoft Copilot vulnerability found by Varonis Threat Labs; disclosed to Microsoft in December 2025, patches shipped August 18, 2026
One-click vulnerability chain in Microsoft Copilot Personal that quietly exfiltrates enterprise data without obvious red flags
All cves in this workspace.