CVE-2026–47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration
I reported this vulnerability to Microsoft MSRC on March 15, 2026. Microsoft confirmed the issue, rated it as Critical, awarded a $12,000… Continue reading on Medium »
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.