Microsoft’s security tracking has assigned CVE-2026-24299 to an information disclosure vulnerability in Microsoft 365 Copilot, and the most important detail for defenders is not a flashy exploit chain but the advisory’s own signal of confidence. In Microsoft’s terminology, that confidence metric...