Veille CVE

Recherche « Microsoft Copilot Studio »

9 CVE

Critique 1 Élevée 5 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Copilot Studio » ✕
  1. CVE-2026-81381 7.5 Élevée

    Microsoft Visual Studio Code

    Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  2. CVE-2026-81380 5.9 Moyenne

    Microsoft Visual Studio Code

    Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  3. CVE-2026-80098 10.0 Critique

    Microsoft Copilot Studio

    Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.

  4. CVE-2026-70335 7.8 Élevée

    Microsoft Visual Studio Code

    Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

  5. CVE-2026-65675 6.5 Moyenne

    Microsoft Visual Studio Code CoPilot Chat Extension · Microsoft github copilot chat

    No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

  6. CVE-2026-47282 6.5 Moyenne

    Microsoft Visual Studio Code

    Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  7. CVE-2026-50519 7.5 Élevée

    Microsoft GitHub Copilot Chat

    Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

  8. CVE-2026-45482 8.4 Élevée

    Microsoft Visual Studio Code CoPilot Chat Extension · Microsoft visual studio code

    Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

  9. CVE-2026-41109 8.8 Élevée

    Microsoft Visual Studio Code

    Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.