CVE-2026-33111

HighCVSS 7.5

Published: 07/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.14%

66th percentile - higher than 66% of all known CVEs

Summary

In Copilot Chat (Microsoft Edge), improper neutralization of special elements used in commands leads to command injection vulnerability. This allows an unauthorized attacker to disclose information over a network.

Risk Assessment

An attacker could gain access to sensitive information, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update Microsoft Edge to the latest version and to monitor and secure network communications.

Other vulnerabilities in Copilot Chat (Microsoft Edge)

CVE-2026-47644Medium
An injection vulnerability in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

Original NVD description (English source)

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS