Microsoft edge copilot vulnerabilities

Latest Microsoft edge copilot CVEs

Newest publication first

1. CVE-2026-48561 Microsoft Edge Copilot Remote Code Execution Vulnerability

   Published 2026-07-14

   Critical·CVSS 9.6 EPSS 0.86%

   Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.