183 matches found
PoC-CVE-2025-62222
PoC: CVE-2025-62222 - GitHub Copilot Chat RCE This repository contains a Proof of Concept PoC for the vulnerability CVE-2025-62222. It demonstrates how Remote Code Execution RCE can be achieved on a developer's machine by manipulating the context of GitHub Copilot Chat in VS Code via hidden promp...
CVE-2026-81381
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81380
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73337
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-81381
CVE-2026-81381 affects GitHub Copilot and Visual Studio Code , where insufficiently protected credentials can be disclosed over a network by an unauthorized attacker, resulting in high confidentiality impact with no integrity or availability impact. The vulnerability is rated CVSS 6.5 (MEDIUM) wi...
CVE-2026-81380
CVE-2026-81380 is a command injection flaw in GitHub Copilot and Visual Studio Code that can allow an unauthenticated remote attacker to disclose information over a network . The vulnerability is rated CVSS 3.1 5.3 (MEDIUM) with a high attack complexity, no required privileges, and required user ...
EUVD-2026-73336
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
Wiz Red Agent independently discovered and exploited a GitHub Actions injection missed by GitHub’s Advanced Security, validated access to sensitive data in Snowflake’s internal Jira, and assessed the blast radius—all without human intervention, five days after the flaw became live...
CVE-2026-70335
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70335
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
EUVD-2026-56588
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...
PT-2026-70768
Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in an OS command, known as OS command injection, allows an unauthorized attacker to...
KLA91206 Multiple vulnerabilities in Microsoft Visual Studio Code
Multiple vulnerabilities were found in Microsoft Visual Studio Code. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution...
CVE-2026-50510
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...
CVE-2026-47282
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...