CVE-2025-59272

creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-11-22 10:34:05+00:00| seen|...

CVE-2025-59272

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to perform information disclosure locally...

CVE-2025-59272

CVE-2025-59272 : Affects Microsoft 365 Copilot Business Chat. Described as a spoofing/command-injection vulnerability caused by improper neutralization of special elements in Copilot, enabling an unauthorized attacker to perform local information disclosure. Root cause: improper input handling in...