cve 2026-24299

CVE-2026-24299 is an information disclosure vulnerability in Microsoft 365 Copilot, as tracked by Microsoft's security advisory. The advisory's confidence signal is a key detail for defenders, indicating how certain Microsoft is about the vulnerability's existence and the credibility of technical details. This confidence metric helps prioritize patching urgency, even when public exploit details are limited. The vulnerability highlights that cloud AI features can pose real risks and require prompt patching, despite sparse public descriptions.