Github Copilot

github_copilot

Vendor: Microsoft • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-50510 1Microsoft 1Github Copilot Jul 22, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.
CVE-2025-66389 1Microsoft 1Github Copilot Jun 30, 2026 Jun 22, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt inj...Show more GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.Show less
CVE-2026-21516 1Microsoft 1Github Copilot Jun 17, 2026 Feb 10, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network.
CVE-2025-64671 1Microsoft 1Github Copilot Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.