{"data":{"id":"e3165214-6bf1-4844-889b-640404eea176","title":"CVE-2026-41614: Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.","summary":"CVE-2026-41614 is an improper access control flaw (CWE-284) in M365 Copilot for Desktop. It allows an unauthorized attacker to perform spoofing, but only locally. NIST has not yet provided an NVD assessment, and the source is Microsoft Corporation, published 05/12/2026.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-41614","publishedAt":"2026-05-12T18:17:23.363Z","cveId":"CVE-2026-41614","cweIds":["CWE-284"],"cvssScore":"6.2","cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["M365 Copilot for Desktop"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"M365 Copilot for Desktop improper access control allows local spoofing","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00405,"epssCheckedAt":"2026-10-14T18:05:58.877Z","kevDateAdded":null,"advisoryAliases":["GHSA-r8h5-x7jj-cjjx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:48:26.004Z","patchAvailable":null,"disclosureDate":"2026-05-12T18:17:23.363Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}