Vulnerabilidades do Microsoft Github Copilot
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Github Copilot: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:microsoft:github_copilot
CVE-2026-50510
Alta · 7.8
CWE-641 14/07/2026
GitHub Copilot Remote Code Execution Vulnerability
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.
CVE-2025-66389
Alta · 7.5
CWE-552 22/06/2026
Files or Directories Accessible to External Parties em Microsoft Github Copilot
GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.
CVE-2026-21516
Alta · 7.8
CWE-77 10/02/2026
GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network.
CVE-2025-64671
Alta · 7.8
CWE-77 09/12/2025
GitHub Copilot for Jetbrains Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.