CVE-2025-62222highCWE-20CWE-77

CVE-2025-62222: falha de alta gravidade em Microsoft Visual Studio Code CoPilot Chat…

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Microsoft Visual Studio Code CoPilot Chat Extension

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.8%
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Visual Studio Code CoPilot Chat Extension
CVEs relacionadas — Microsoft Visual Studio Code CoPilot Chat…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-21518HIGHGitHub Copilot and Visual Studio Code Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2025-21264HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-23653MEDIUMGitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-21523HIGHGitHub Copilot and Visual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-65675HIGHCoPilot Chat Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2025-62449MEDIUMMicrosoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass VulnerabilityEPSS 0.5%