2026-03-19 21:06:25
microsoft
PUBLISHED
Improper neutralization of special elements used in a command (command injection) in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.