CVE-2025-62453

Published: Nov 11, 2025Modified: Jun 17, 2026

5.0

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.3 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.

Affected (1)

Products: Microsoft: Visual Studio Code

Microsoft

1 product

Visual Studio Code

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Visual Studio Code	Before 1.105.0

Related CWEs

CWE-693

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62453

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.