GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

PT-2026-70768

Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in an OS command, known as OS command injection, allows an unauthorized attacker to...

CVE-2026-70335: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

KLA91206 Multiple vulnerabilities in Microsoft Visual Studio Code

Multiple vulnerabilities were found in Microsoft Visual Studio Code. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution...

EUVD-2026-44116

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...

EUVD-2026-43992

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-50510

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...

CVE-2026-47282

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-47282

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-50510 GitHub Copilot Remote Code Execution Vulnerability

...

CVE-2026-50510

CVE-2026-50510 concerns the GitHub Copilot vulnerability affecting the JetBrains Copilot plugin prior to version 1.13.0. The issue is described as an improper restriction of names for files and other resources, enabling an attacker with local access to execute code on the affected system. The ass...

CVE-2026-50510 GitHub Copilot Remote Code Execution Vulnerability

...

CVE-2026-47282

Summary: CVE-2026-47282 concerns insufficiently protected credentials in GitHub Copilot and Visual Studio Code, leading to potential information disclosure over a network. Impact and scope (as per metrics): CVSS 3.1 base score 6.5 (Medium); attack vector: NETWORK; attack complexity: LOW; privileg...

CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

...

CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

...

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of special elements in output used by a downstream component 'injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network...

GitHub Copilot Remote Code Execution Vulnerability

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

KLA91154 Multiple vulnerabilities in Microsoft Visual Studio Code

Multiple vulnerabilities were found in Microsoft Visual Studio Code. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Visual Studio Code can be...

KLA91149 Multiple vulnerabilities in Microsoft Copilot Plugin

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in GitHub Copilot...