songjianyang/CVE-2026-47644

PoC

CVE-2026-47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration - PoC & full writeup

view exploit source poc_in_githubauthor songjianyangpublished 2026-10-15catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-47644US	high7.5	0.73% (54th)	Exploit	2026-06-04
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose info…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.