Vulnerability index

Browse CVEs

73 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Command InjectionCWE-77 × clear
Powershell HIGH 7.8
CVE-2026-50523

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute …

No fix yet
Fix from $4,900 2026-08-14
365 Apps HIGH 7.8
CVE-2026-68792

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate priv…

No fix yet
Fix from $4,900 2026-08-11
365 Apps HIGH 7.8
CVE-2026-65656

Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute co…

No fix yet
Fix from $4,900 2026-08-11
Windows 10 1607 HIGH 8.8
CVE-2026-49179

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to ex…

Fix: 10.0.14393.9418 / 10.0.17763.9115+
Fix from $4,900 2026-08-11
Azure Monitor Agent HIGH 7.2
CVE-2026-47299

Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate p…

Fix: 1.43+
Fix from $4,900 2026-08-11
Visual Studio Code MEDIUM 6.5
CVE-2026-47285

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose…

No fix yet
Fix from $4,000 2026-08-11
Windows Admin Center HIGH 8.8
CVE-2026-56197

Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute …

Fix: 2606+
Fix from $1,950 2026-07-14
Copilot HIGH 7.1
CVE-2026-55145

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampe…

Mitigation only
Fix from $1,950 2026-07-14
Windows 11 24h2 HIGH 7.8
CVE-2026-50488

Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker t…

Fix: 10.0.26100.8875 / 10.0.26100.33158+
Fix from $1,950 2026-07-14
Windows 10 1809 HIGH 7.8
CVE-2026-58635

Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elev…

Fix: 10.0.17763.9020 / 10.0.19044.7548+
Fix from $1,950 2026-07-14
Visual Studio Code HIGH 8.4
CVE-2026-50520

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute …

Fix: 1.128.1+
Fix from $1,950 2026-07-14
365 Copilot CRITICAL 9.6
CVE-2026-48561

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker …

Mitigation only
Fix from $2,300 2026-07-14
365 Copilot HIGH 7.5
CVE-2026-42895

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform t…

Mitigation only
Fix from $1,950 2026-06-19
Copilot HIGH 8.8
CVE-2026-45497

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute cod…

Mitigation only
Fix from $1,950 2026-06-04
Copilot HIGH 7.5
CVE-2026-42824EPSS 8%

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose infor…

Mitigation only
Fix from $1,950 2026-06-04
365 Copilot HIGH 7.5
CVE-2026-42827

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose infor…

Mitigation only
Fix from $1,950 2026-05-22
365 Copilot CRITICAL 9.3
CVE-2026-41090

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform t…

Mitigation only
Fix from $2,300 2026-05-22
Power Pages CRITICAL 9.8
CVE-2026-23652

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execu…

Mitigation only
Fix from $2,300 2026-05-22
Windows 11 24h2 MEDIUM 6.8
CVE-2026-45585

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this…

No fix yet
Fix from $1,600 2026-05-20
Outlook HIGH 7.5
CVE-2026-42893

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tamper…

Fix: 5.2617.1+
Fix from $1,950 2026-05-12
Azure Cloud Shell CRITICAL 9.6
CVE-2026-35428

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform s…

Mitigation only
Fix from $2,300 2026-05-07
Copilot Chat HIGH 7.5
CVE-2026-33111

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker …

Mitigation only
Fix from $1,950 2026-05-07
Windows 10 1607 HIGH 7.8
CVE-2026-32183

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execu…

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Github Copilot Chat MEDIUM 6.5
CVE-2026-23653

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized att…

Fix: 0.37.3+
Fix from $1,600 2026-04-14
Bing Images CRITICAL 9.8
CVE-2026-32194

Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execu…

No fix yet
Fix from $2,300 2026-03-19
Copilot HIGH 7.5
CVE-2026-26136

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose …

Mitigation only
Fix from $1,950 2026-03-19
365 Copilot MEDIUM 5.3
CVE-2026-24299

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose infor…

Mitigation only
Fix from $1,600 2026-03-19
365 Copilot HIGH 7.1
CVE-2026-26133

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Fix: 2.2.260210.21290750 / 2.106+
Fix from $1,950 2026-03-16
Visual Studio Code HIGH 8.8
CVE-2026-21518

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized a…

Fix: 1.109.2+
Fix from $1,950 2026-02-10
Confcom MEDIUM 6.7
CVE-2026-21522

Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate…

Fix: 1.2.8+
Fix from $1,600 2026-02-10