Copilot Chat Microsoft Edge
Monthly
Information disclosure in Copilot Chat within Microsoft Edge allows a remote, unauthenticated attacker to leak sensitive data by exploiting improper neutralization of special elements passed to a downstream component (an injection flaw). Microsoft has issued a fix, and the low EPSS score (0.08%) combined with a 'none' SSVC exploitation status indicates no public exploit identified at time of analysis. The CVSS 7.5 rating reflects a high confidentiality impact with no integrity or availability effect.
Information disclosure in Copilot Chat within Microsoft Edge allows a remote, unauthenticated attacker to leak sensitive data by exploiting improper neutralization of special elements passed to a downstream component (an injection flaw). Microsoft has issued a fix, and the low EPSS score (0.08%) combined with a 'none' SSVC exploitation status indicates no public exploit identified at time of analysis. The CVSS 7.5 rating reflects a high confidentiality impact with no integrity or availability effect.