CVE-2025-59252

Critical · CVSS 9.3

CVSS: 9.3; nvd
EPSS: 0.57%; 46th pct
KEV: No
Class: other; CWE-77

Description

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59252

Status: profiled · ingested 2026-10-08T18:00:43.000Z