Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| microsoft | 365 copilot | — | |
| microsoft | edge copilot | 1.0.0 – < publication | |
| Microsoft | Microsoft Edge Copilot for Android | 1.0.0 – < publication | |
| Microsoft | Microsoft Edge Copilot for IOS | 1.0.0 – < publication |
cpe:2.3:a:microsoft:365_copilot:-:*:*:*:*:android:*:*cpe:2.3:a:microsoft:365_copilot:-:*:*:*:*:iphone_os:*:*Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.