365_word_copilot vulnerabilities

CVEs whose affected-version data names the 365_word_copilot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-59252Critical· 9.3

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network.

▾ Midnightmicrosoft · 365_word_copilotEPSS 0.57%via NVD

365_word_copilot vulnerabilities (CVEs) · VulnSea