Github Copilot Chat (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 58 known versions, newest CVE from 2026-08-11. Vendor: Microsoft.

CVEs of Github Copilot Chat

• CVE-2026-65675 - CVSS 7.1 (high), 2026-08-11: No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2026-50519 - CVSS 7.5 (high), 2026-06-19: Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a…
• CVE-2026-23653 - CVSS 6.5 (medium), 2026-04-14: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to…
• CVE-2025-62449 - CVSS 6.8 (medium), 2025-11-11: Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to…
• CVE-2025-62222 - CVSS 8.8 (high), 2025-11-11: Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized…