CVE-2026-24301 refers to a set of three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, discovered by Varonis Threat Labs. These flaws allow a one-click attack to execute prompts automatically, exfiltrate data from connected services, and poison the user's memory store. Microsoft patched the issue on August 18, 2026.