CVE-2025-59252

M365 Copilot Spoofing Vulnerability...

CVE-2025-59286

Copilot Spoofing Vulnerability...

CVE-2025-59272

Copilot Spoofing Vulnerability...

EUVD-2025-33546

Copilot Spoofing Vulnerability...

EUVD-2025-33549

M365 Copilot Spoofing Vulnerability...

EUVD-2025-33547

Copilot Spoofing Vulnerability...

CVE-2025-59286

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2025-59272

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to perform information disclosure locally...

CVE-2025-59252

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2025-59286

CVE-2025-59286 is identified across multiple sources as a Copilot Spoofing/Information Disclosure vulnerability related to Microsoft 365 Copilot Business Chat. The NVD entry describes command-injection related information disclosure, while CNVD/CNNVD and other feeds label it as a Copilot spoofing...

CVE-2025-59286 Copilot Information Disclosure Vulnerability

...

CVE-2025-59286 Copilot Information Disclosure Vulnerability

...

CVE-2025-59272

CVE-2025-59272 : Affects Microsoft 365 Copilot Business Chat. Described as a spoofing/command-injection vulnerability caused by improper neutralization of special elements in Copilot, enabling an unauthorized attacker to perform local information disclosure. Root cause: improper input handling in...

CVE-2025-59272 Copilot Information Disclosure Vulnerability

...

CVE-2025-59272 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252

CVE-2025-59252 — M365 Copilot Information Disclosure Affected product: Microsoft 365 Copilot (Copilot/spoofing context referenced across sources). Root cause: Improper neutralization of special elements used in a command (command injection) in Copilot, enabling an unauthorized attacker to disclos...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

M365 Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...

Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to perform information disclosure locally...