Filtered by vendor Microsoft Subscriptions
Filtered by product Github Copilot Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-50510 1 Microsoft 2 Gihub Copilot Plugin For Jetbrains Ides, Github Copilot 2026-07-15 7.8 High
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.
CVE-2025-66389 1 Microsoft 2 Copilot, Github Copilot 2026-06-22 7.5 High
GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.
CVE-2025-64671 1 Microsoft 2 Gihub Copilot Plugin For Jetbrains Ides, Github Copilot 2026-04-20 8.4 High
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.
CVE-2026-21516 1 Microsoft 2 Gihub Copilot Plugin For Jetbrains Ides, Github Copilot 2026-04-15 8.8 High
Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code over a network.