Skip to content
Sign in
7.5 High

CVE-2026-33111 Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge)…

Description

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product Affected versions Fixed in
Copilot Chat (Microsoft Edge) Versions not published

Other CVEs of Copilot Chat (Microsoft Edge)

The 2 CVEs of Copilot Chat (Microsoft Edge) →
CVE-2026-47644 Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat… 6.5 Medium
Track this CVE