Microsoft 365 Admin Center Elevation of Privilege Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 9.8)

Elevation of Privilege · Critical · CVSS 9.8. Affects: Microsoft 365 Admin Center.

Affected: Microsoft 365 Admin Center

Related changes

• Microsoft Copilot (Microsoft 365): Admins will be able to define rules to automate agent lifecycle management. · Microsoft 365 Admin Center
• Microsoft 365 Admin Center: Usage reports - Message consumption for Pay-as-you-go experiences in Copilot Chat. · Microsoft 365 Admin Center
• Microsoft 365 Admin Center: M365 Copilot - Billing and usage - Usage insights · Microsoft 365 Admin Center
• Microsoft Copilot (Microsoft365): Graph API - Copilot for Microsoft 365 usage · Microsoft 365 Admin Center
• Microsoft 365 admin center: Manage SharePoint agents via Agents page · Microsoft 365 Admin Center
• Microsoft 365 admin center: Usage reports - Microsoft 365 Copilot for GCC Moderate · Microsoft 365 Admin Center

View at Microsoft → Copy summary