Microsoft Edge Copilot Chat Command Injection Vulnerability Allowing Information Disclosure
Vulnerability
A command injection vulnerability has been identified in Copilot Chat within Microsoft Edge. This issue allows unauthorized attackers to disclose information over a network. The vulnerability arises from improper neutralization of special elements used in commands, creating a potential for information leakage.
Impact
Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.
Added: May 7, 2026, 10:27 PM
Updated: May 7, 2026, 10:27 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.6remediation
0.0relevance
7.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.