CVE-2025-59272 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure…
Critical CVSS: 9.3

CVE-2025-59272

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.
Vendor
Microsoft
Product
365 Copilot Chat
CWE
CWE-77
Yayın Tarihi
2025-10-09 21:15:38
Güncelleme
2025-12-11 20:16:22
Source Identifier
secure@microsoft.com
KEV Date Added
-

Kategoriler

CWE-77 365 Copilot Chat CRITICAL Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59272