CVE-2026-48561

Vendor

Microsoft

Product

Copilot

CVSS

9.6

Exposure class

AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 34
   Research ZDI 14 Jul 2026

   The July 2026 Security Update Review

   Well folks. Here we are. The bug apocalypse has fully descended upon us. I’ll do my best to sort this out in some way meaningful, but this month’s release shows us the nay-sayers were right, and I’ve got to hand it to the…

   CVSS 9.9 CVE-2026-56155CVE-2026-56154CVE-2026-56164+57 more Microsoft Adobe
2. 29
   CVE NVD 14 Jul 2026

   Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute…

   Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute code over a network.

   CVSS 9.6 CVE-2026-48561 Microsoft
3. 25
   Advisory MSRC 14 Jul 2026

   CVE-2026-48561 Microsoft Copilot Remote Code Execution Vulnerability

   Corrected the CVE description and title. This is an informational change only.

   CVE-2026-48561 Microsoft