CVE-2025-59252

M365 Copilot Spoofing Vulnerability...

CVE-2025-59252

creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-11-22 06:33:04+00:00| seen|...

CVE-2025-59252

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252

CVE-2025-59252 — M365 Copilot Information Disclosure Affected product: Microsoft 365 Copilot (Copilot/spoofing context referenced across sources). Root cause: Improper neutralization of special elements used in a command (command injection) in Copilot, enabling an unauthorized attacker to disclos...