CVE-2026-47644

MediumCVSS 6.5

Published: 04/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.73%

51th percentile - higher than 51% of all known CVEs

Summary

An injection vulnerability in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

Risk Assessment

Risk of data leakage that could be intercepted by an unauthenticated attacker.

Recommendation

Apply security updates provided by Microsoft for Copilot Chat in Microsoft Edge.

Other vulnerabilities in Copilot Chat (Microsoft Edge)

CVE-2026-33111High
In Copilot Chat (Microsoft Edge), improper neutralization of special elements used in commands leads to command injection vulnerability. This allows an unauthorized attacker to disclose information over a network.

Original NVD description (English source)

Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.