HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-33111 — Improper neutralization of special elements used in a command ('command injectio...

·Source: NIST NVD

Updated:

Executive Summary

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

Analysis

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network. CVSS Score: 7.5. Published: 2026-05-07T22:16:34.157.

Indicators of Compromise (1)

CVE (1)
CVE-2026-33111
Source Attribution

Originally published by NIST NVD on May 7, 2026. Verified by: NIST.

Related Threats