NCSC-2025-0362

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Visual Studio

view advisory published 2025-11-11

Microsoft heeft kwetsbaarheden verholpen in Visual Studio en Code Copilot voor Visual Studio.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-62453US——
Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.
CVE-2025-62449US——
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security featu…
CVE-2025-62222US—Exploit
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code ove…
CVE-2025-62214US——
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan