Copilot Chat (Microsoft Edge) vulnerabilities

2 known vulnerabilities in Copilot Chat (Microsoft Edge) from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Copilot Chat (Microsoft Edge): Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-47644Jun 4, 2026Microsoft

  Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

• 7.5 High severity

  Copilot Chat (Microsoft Edge): Improper Neutralization of Special Elements used in a Command

  CVE-2026-33111May 7, 2026MicrosoftEPSS 1.14%

  Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.