CVE-2025-59286 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a ne…
Critical CVSS: 9.3

CVE-2025-59286

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.
Vendor
Microsoft
Product
365 Copilot Chat
CWE
CWE-77
Yayın Tarihi
2025-10-09 21:15:39
Güncelleme
2025-12-11 20:16:23
Source Identifier
secure@microsoft.com
KEV Date Added
-

Kategoriler

CWE-77 365 Copilot Chat CRITICAL Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59286