Visual Studio Code Copilot Chat Extension (Microsoft) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-11. Vendor: Microsoft.
CVEs of Visual Studio Code Copilot Chat Extension
- CVE-2026-65675 - CVSS 7.1 (high), 2026-08-11: No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-45482 - CVSS 8.4 (high), 2026-06-09: Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to…
- CVE-2026-23653 - CVSS 6.5 (medium), 2026-04-14: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to…
- CVE-2026-21518 - CVSS 8.8 (high), 2026-02-10: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker…
- CVE-2026-21523 - CVSS 8 (high), 2026-02-10: Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
- CVE-2025-62449 - CVSS 6.8 (medium), 2025-11-11: Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to…
- CVE-2025-62222 - CVSS 8.8 (high), 2025-11-11: Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized…
- CVE-2025-21264 - CVSS 7.1 (high), 2025-05-13: Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
