CVE Intelligence

Vulnerabilidades do Microsoft Microsoft Visual Studio Code CoPilot Chat Extension

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Microsoft Microsoft Visual Studio Code CoPilot Chat Extension: 6 registro(s), com versões afetadas e correções.

CVE-2026-45482 Alta · 8.4 CWE-22 09/06/2026
Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-23653 Média · 6.5 CWE-77 14/04/2026
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.
CVE-2026-21523 Alta · 8.0 CWE-367 10/02/2026
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
CVE-2026-21518 Alta · 8.8 CWE-77 10/02/2026
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-62449 Média · 6.8 CWE-22 11/11/2025
Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally.
CVE-2025-62222 Alta · 8.8 CWE-77 11/11/2025
Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.