10738 matches found
CVE-2025-62222 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2025-62449 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
...
CVE-2025-62222
The CVE-2025-62222 issue affects the Visual Studio Code CoPilot Chat Extension, with a command injection flaw caused by improper handling of special characters in user-controlled input. It enables remote code execution over the network when exploited against versions prior to 0.32.5. Mitigation: ...
EUVD-2025-93395
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network...
CVE-2025-62449 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
...
CVE-2025-62449
The CVE-2025-62449 issue is a path traversal vulnerability in the Visual Studio Code CoPilot Chat Extension (prior to version 0.32.5). A local, low-privilege, authorized attacker can bypass a security feature and access files outside the intended workspace, with high impact to confidentiality and...
EUVD-2025-93394
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally...
CVE-2025-62214
CVE-2025-62214 is a Visual Studio remote code execution vulnerability stemming from improper neutralization of special elements in a command, enabling локally authenticated code execution. According to the CVE records, the issue affects Visual Studio and is assigned CVSS 3.1: Local, High impact o...
EUVD-2025-93398
Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an authorized attacker to execute code locally...
CVE-2025-62214 Visual Studio Remote Code Execution Vulnerability
...
CVE-2025-62214 Visual Studio Remote Code Execution Vulnerability
...
Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network...
Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally...
Visual Studio Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an authorized attacker to execute code locally...
GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally...
EUVD-2025-75265
Malicious code in visualroadrunner-gooddev npm...
EUVD-2025-83594
Malicious code in visualcentipedez3n npm...
Malicious code in visual_mockingbird_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8657686c5f143e7123e08ba2a354114be566e8faf3736055f04c9c17181cbf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...