Microsoft has published CVE-2026-41106 as a Microsoft 365 Copilot elevation-of-privilege vulnerability in the MSRC Security Update Guide, framing it as a cloud-service security issue where the most important unresolved question is not whether Copilot is useful, but how much trust enterprises...