Skip to content

Vulnerabilities of Microsoft Microsoft 365 Copilot's Business Chat

Is your version affected?

CVE Summary Score Published
CVE-2025-59286 Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized… 9.3 Critical Oct 9, 2025
CVE-2025-59272 Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized… 9.3 Critical Oct 9, 2025

Other Microsoft products