CVE-2025-62214

CVE-2025-62214 is a Visual Studio remote code execution vulnerability stemming from improper neutralization of special elements in a command, enabling локally authenticated code execution. According to the CVE records, the issue affects Visual Studio and is assigned CVSS 3.1: Local, High impact o...

Visual Studio Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio allows an authorized attacker to execute code locally...

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network...

Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally...

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally...

EUVD-2025-75265

Malicious code in visualroadrunner-gooddev npm...

EUVD-2025-83594

Malicious code in visualcentipedez3n npm...

EUVD-2025-73021

Malicious code in visualmockingbirdz3n npm...

EUVD-2025-73022

Malicious code in visualcoyotez3n npm...

Malicious code in visual_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8657686c5f143e7123e08ba2a354114be566e8faf3736055f04c9c17181cbf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-rose-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a79522cea948231fa43638c4e02b0967b64522b2d2fc96bea075100fb1f5d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51180

Malicious code in visual-magenta-sheep npm...

EUVD-2025-51176

Malicious code in visual-sapphire-gecko npm...

EUVD-2025-51177

Malicious code in visual-salmon-quail npm...

EUVD-2025-51178

Malicious code in visual-rose-xerinae npm...

EUVD-2025-51179

Malicious code in visual-pink-sparrow npm...

EUVD-2025-51181

Malicious code in visual-green-frog npm...

PT-2025-46514

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description The Visual Studio Code CoPilot Chat Extension contains a flaw related to improper neutralization of special elements used in commands, potentially leading to...

PT-2025-46517

Name of the Vulnerable Software and Affected Versions GitHub Copilot and Visual Studio Code affected versions not specified Description A security feature bypass can occur due to improper validation of generative AI output in GitHub Copilot and Visual Studio Code. An authorized attacker can explo...

PT-2025-46515

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An issue exists in Visual Studio Code CoPilot Chat Extension related to improper limitation of a pathname to a restricted directory, also known as a 'path...