HIGHVulnerability
Verified
Global
NVD HIGH: CVE-2026-33111 — Improper neutralization of special elements used in a command ('command injectio...
·Source: NIST NVD
Updated:
Executive Summary
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Analysis
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network. CVSS Score: 7.5. Published: 2026-05-07T22:16:34.157.