CVE-2025-59272

Critical · CVSS 9.3

CVSS: 9.3; nvd
EPSS: 0.57%; 46th pct
KEV: No
Class: other; CWE-77

Description

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59272

Status: profiled · ingested 2026-10-08T18:00:43.000Z