CVE Catalog
CVE-2026-33111
HighSummary
In Copilot Chat (Microsoft Edge), improper neutralization of special elements used in commands leads to command injection vulnerability. This allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An attacker could gain access to sensitive information, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update Microsoft Edge to the latest version and to monitor and secure network communications.
Other vulnerabilities in Copilot Chat (Microsoft Edge)
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.