CVE-2025-62449: falha de média gravidade em Microsoft Visual Studio Code CoPilot Chat…
Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 0.5%
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Visual Studio Code CoPilot Chat ExtensionCVEs relacionadas — Microsoft Visual Studio Code CoPilot Chat…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-21518HIGHGitHub Copilot and Visual Studio Code Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2025-62222HIGHAgentic AI and Visual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-21264HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-23653MEDIUMGitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityEPSS 0.8%CVE-2026-21523HIGHGitHub Copilot and Visual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-65675HIGHCoPilot Chat Security Feature Bypass VulnerabilityEPSS 0.6%