CVE-2025-62453

CVE-2025-62453 affects GitHub Copilot and Visual Studio Code due to improper validation of generative AI output, enabling an authorized local attacker to bypass a security feature. Multiple sources corroborate a security feature bypass vulnerability in Visual Studio Code and Copilot Chat, with im...

CVE-2025-62453 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2025-62222 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2025-62449 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

...

CVE-2025-62449 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

...

EUVD-2025-93395

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network...

EUVD-2025-93394

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally...

CVE-2025-62222 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

...

CVE-2025-62222

The CVE-2025-62222 issue affects the Visual Studio Code CoPilot Chat Extension, with a command injection flaw caused by improper handling of special characters in user-controlled input. It enables remote code execution over the network when exploited against versions prior to 0.32.5. Mitigation: ...

CVE-2025-62449

The CVE-2025-62449 issue is a path traversal vulnerability in the Visual Studio Code CoPilot Chat Extension (prior to version 0.32.5). A local, low-privilege, authorized attacker can bypass a security feature and access files outside the intended workspace, with high impact to confidentiality and...

CVE-2025-62214 Visual Studio Remote Code Execution Vulnerability

...

EUVD-2025-93398

Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an authorized attacker to execute code locally...

CVE-2025-62214

CVE-2025-62214 is a Visual Studio remote code execution vulnerability stemming from improper neutralization of special elements in a command, enabling локally authenticated code execution. According to the CVE records, the issue affects Visual Studio and is assigned CVSS 3.1: Local, High impact o...

CVE-2025-62214 Visual Studio Remote Code Execution Vulnerability

...

Visual Studio Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an authorized attacker to execute code locally...

Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally...

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network...

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally...

PT-2025-46517

Name of the Vulnerable Software and Affected Versions GitHub Copilot and Visual Studio Code affected versions not specified Description A security feature bypass can occur due to improper validation of generative AI output in GitHub Copilot and Visual Studio Code. An authorized attacker can explo...

PT-2025-46514

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description The Visual Studio Code CoPilot Chat Extension contains a flaw related to improper neutralization of special elements used in commands, potentially leading to...