Spandan Pokhrel

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** Improper neutralization of special elements in output used by a downstream component (injection) allows an unauthorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge Copilot Chat (affected versions not specified) **Description** Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to disclose information over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Copilot (affected versions not specified) **Description** An improper neutralization of special elements used in a command ('command injection') exists in Microsoft Copilot. This allows an unauthorized attacker to disclose information over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.