Critical CVSS 7.5 EPSS 0.07961 2025-06 archive

Executive Summary

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Overview

7.5
CVSS HIGH
Critical
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Information Disclosure
Released Jun 10 2025
Last Updated Jun 10 2025
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.07961 — 0.94228 percentile
NVD CVSS 7.5 HIGH — differs from MSRC

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
Low
AVAILABILITY
None
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 8.1

EPSS Score

0.07961
probability of exploitation in the next 30 days
0.94228 percentile - updated 2026-08-14
View on FIRST.org

Exploits & PoC

4 public PoCs
RepositoryStarsPublishedDescription
vikasudasi/exfil-scan 6 2026-07-25 Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems
daryllundy/cve-2025-32711 3 2025-06-27 Proof-of-concept and analysis for CVE-2025-32711
TreRB/markdown-exfil-tester 0 2026-04-20 Black-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in headless Chromium, correlates via network.
Danielossai12/aisecplus-week01-danielossai 0 2026-06-13 AISec Plus Week 1 threat write-up — EchoLeak (CVE-2025-32711), zero-click indirect prompt injection in Microsoft 365 Copilot.

Detection Rules

Acknowledgments

Aim Labs (Part of Aim Security)
Estevam Arantes