Skip to content
OpenAdvisories

Product · Microsoft

Copilot Web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-24301 Public exploit

    Microsoft Copilot Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

    Microsoft Copilot Web