Skip to content
Sign in
9.3 Critical

CVE-2025-59252 Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized…

Description

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft 365 Word Copilot Versions not published

Other CVEs of Microsoft 365 Word Copilot

The 2 CVEs of Microsoft 365 Word Copilot →
CVE-2026-21521 Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose… 7.4 High
Track this CVE