CVE-2026-24301

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 18, 2026

Last Seen

October 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CoSnitch Attack Exposes Microsoft Copilot Vulnerabilities60.6

Researchers from Varonis Threat Labs discovered a vulnerability in Microsoft Copilot Personal, dubbed 'CoSnitch,' that allows attackers to execute commands without user confirmation. By manipulating the AI's responses, they revealed an undocumented URL parameter, '?autorun=1', which could trigger au...