CVE-2025-59272 Copilot Information Disclosure Vulnerability

...

CVE-2025-59272

CVE-2025-59272 : Affects Microsoft 365 Copilot Business Chat. Described as a spoofing/command-injection vulnerability caused by improper neutralization of special elements in Copilot, enabling an unauthorized attacker to perform local information disclosure. Root cause: improper input handling in...

CVE-2025-59272 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252

CVE-2025-59252 — M365 Copilot Information Disclosure Affected product: Microsoft 365 Copilot (Copilot/spoofing context referenced across sources). Root cause: Improper neutralization of special elements used in a command (command injection) in Copilot, enabling an unauthorized attacker to disclos...

copilot-studio-datainsight (>=0.0.1 <=0.0.6), flowise (>=1.6.1 <=2.2.8) potentially affected by CVE-2025-61913 via flowise-components (>=1.3.4 <=2.2.8)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =2.2.8 Source cves: CVE-2025-61913 Source advisory: OSV:GHSA-JV9M-VF54-CHJJ...

Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...

M365 Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...

Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to perform information disclosure locally...

Microsoft 365 Word Copilot 命令注入漏洞

Microsoft 365 Word Copilot is an AI assistant from Microsoft Corporation, USA. Microsoft 365 Word Copilot has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...

Microsoft 365 Copilot Business Chat 命令注入漏洞

Microsoft 365 Copilot Business Chat is an AI chat software from Microsoft Corporation, USA. Microsoft 365 Copilot Business Chat has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...

Microsoft 365 Copilot Business Chat 命令注入漏洞

Microsoft 365 Copilot Business Chat is an AI chat software from Microsoft Corporation, USA. Microsoft 365 Copilot Business Chat has a spoofing vulnerability that can be exploited by attackers to cause spoofing attacks...

PT-2025-41487

Name of the Vulnerable Software and Affected Versions Copilot affected versions not specified Description A spoofing issue exists in Copilot. This allows for potential misrepresentation or impersonation within the Copilot environment. Recommendations At the moment, there is no information about a...

PT-2025-41486

Name of the Vulnerable Software and Affected Versions Copilot affected versions not specified Description A spoofing issue exists within Copilot. The vulnerability allows for potential manipulation of Copilot’s responses. Recommendations At the moment, there is no information about a newer versio...

PT-2025-41484

Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot affected versions not specified Description A spoofing issue exists in Microsoft 365 Copilot. The vulnerability allows for potential misrepresentation of Copilot’s responses, potentially leading to user confusion or...

EUVD-2000-0282

Malware in sbrugna...

EUVD-2025-18114

Malicious code in bioql PyPI...

EUVD-2024-40359

Malicious code in bioql PyPI...

EUVD-2025-24366

Malicious code in bioql PyPI...