CVE-2026-23653: falha de média gravidade em Microsoft Visual Studio Code CoPilot Chat…
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.7epss 0.8%
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Visual Studio Code CoPilot Chat ExtensionCVEs relacionadas — Microsoft Visual Studio Code CoPilot Chat…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-21518HIGHGitHub Copilot and Visual Studio Code Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2025-62222HIGHAgentic AI and Visual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-21264HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-21523HIGHGitHub Copilot and Visual Studio Code Remote Code Execution VulnerabilityEPSS 0.8%CVE-2026-65675HIGHCoPilot Chat Security Feature Bypass VulnerabilityEPSS 0.6%CVE-2025-62449MEDIUMMicrosoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass VulnerabilityEPSS 0.5%