Known vulnerabilities in Microsoft Visual Studio Code CoPilot Chat Extension

Vendor: Microsoft
Software: Microsoft Visual Studio Code CoPilot Chat Extension
Software CPE: cpe:2.3:a:microsoft:microsoft_visual_studio_code_copilot_chat_extension:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Visual Studio Code CoPilot Chat Extension Microsoft Visual Studio Code CoPilot Chat Extension is affected by 4 known vulnerabilities: 1 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134483 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45482		 CWE-22 Low
No
No
 1.123.2 12.06.2026 SB2026061282
#VU126260 - Command injection
CVE-2026-23653		 CWE-77 Medium
No
No
 0.37.3 16.04.2026 SB2026041616
#VU118331 - Command injection
CVE-2025-62222		 CWE-77 High
No
No
 - 11.11.2025 SB2025111193
#VU118289 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-62449		 CWE-22 Low
No
No
 - 11.11.2025 SB2025111158