cve-2026-26137

CVE-2026-26137 is a Microsoft 365 Copilot BizChat Elevation of Privilege Vulnerability documented in a Microsoft Security Update Guide entry. The advisory includes a report-confidence metric indicating the vendor's certainty about the flaw and the credibility of available technical details. This vulnerability is considered sensitive for enterprise security teams because it affects BizChat, a component of Microsoft 365 Copilot. The tag covers discussions about the vulnerability's risk, Microsoft's confidence level, and implications for defenders, but does not provide public root-cause details. It is relevant for IT professionals monitoring Microsoft security updates and privilege escalation risks in AI-powered productivity tools.