Copilot vulnerabilities

3 known CVE vulnerabilities in Copilot, translated and rated.

CVE-2025-59286Critical
A command injection vulnerability in Copilot allows an unauthorized attacker to disclose information over a network. It stems from improper neutralization of special elements used in commands.
CVE-2025-59272Critical
A command injection vulnerability in Copilot allows an unauthorized attacker to perform information disclosure locally. It stems from improper neutralization of special elements used in commands.
CVE-2025-59252Critical
A command injection vulnerability in Copilot allows an unauthorized attacker to disclose information over a network. It stems from improper neutralization of special elements used in commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS