Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-62222exploit | 8.8 high | 1.0% | microsoft, github_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network. | 18 Oct |
| CVE-2026-24301exploit | 7.5 high | 1.0% | microsoft, copilot | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. | Thu 22 Oct |
| CVE-2026-45033exploit | 8.5 high | 0.00% | github, copilot-cli | GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent performs git operations. By exploiting git's automatic bare repository discovery during directory traversal, an attacker can set core.fsmonitor or other executable config keys to run arbitrary commands without user awareness or approval. The vulnerability arises because git's core.fsmonitor config key (and 15+ similar keys such as core.hookspath, diff.external, merge.tool, etc.) can specify arbitrary shell commands that git will execute as part of normal operations like status, diff, or rev-parse. This vulnerability is fixed in 1.0.43. | Mon 26 Oct |
| CVE-2026-50517 | 9.9 critical | 2.0% | microsoft, 365_copilot | Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network. | Sat 24 Oct |
| CVE-2026-42869 | 10.0 critical | 1.0% | no CPE yet | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as a fallback value in backend/app/auth/utils.py:28 and ships it verbatim in .env.example. Any deployment where JWT_SECRET is not explicitly set — including the default Docker Compose setup — signs all authentication tokens with this publicly known value. An unauthenticated attacker can forge arbitrary admin-scoped JWTs and gain full control of the application and every security tool it manages without any credentials. This vulnerability is fixed in 0.1.57. | Mon 26 Oct |
| CVE-2026-85885 | 9.9 critical | 1.0% | microsoft, microsoft 365 copilot | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-58617 | 9.8 critical | 1.0% | microsoft, 365_copilot | Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2026-48561 | 9.6 critical | 1.0% | microsoft, microsoft edge copilot for android, microsoft edge copilot for ios | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network. | 18 h ago |
| CVE-2026-41106 | 9.3 critical | 1.0% | microsoft, 365_copilot | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. | Sun 25 Oct |
| CVE-2026-59864 | 9.3 critical | 1.0% | no CPE yet | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota plugin add` and `kiota plugin generate` (with `-t APIPlugin`) emitted attacker-controlled static_template.file values from x-ai-adaptive-card and x-ai-capabilities into generated Microsoft 365 Copilot and Teams plugin manifests without path validation, allowing ../, absolute, rooted, UNC, Windows drive, or URI paths in response_semantics.static_template.file to cause path traversal or out-of-package file inclusion when the generated plugin was deployed. This issue is fixed in version 1.29.1 and 1.32.5. | Sat 24 Oct |
| CVE-2026-59118 | 9.3 critical | 1.0% | microsoft, power_apps | Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network. | Sat 24 Oct |
| CVE-2025-59252 | 9.3 critical | 1.0% | microsoft, 365_word_copilot | Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network. | 8 Oct |
| CVE-2025-59272 | 9.3 critical | 1.0% | microsoft, 365_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally. | 8 Oct |
| CVE-2025-59286 | 9.3 critical | 1.0% | microsoft, 365_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network. | 8 Oct |
| CVE-2026-41109 | 8.8 high | 1.0% | microsoft, visual_studio_code | Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network. | Mon 26 Oct |
| CVE-2026-47645 | 8.8 high | 1.0% | microsoft, 365_copilot | Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network. | Sun 25 Oct |
| CVE-2026-109443 | 8.7 high | 1.0% | no CPE yet | JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the agent invoke subprocess.run with shell=True on the host to access other tenants' data and server secrets. | 20 Oct |
| CVE-2026-78501 | 8.6 high | 1.0% | microsoft, 365_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2025-64660 | 8.0 high | 1.0% | microsoft, visual_studio_code | Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network. | 18 Oct |
| CVE-2025-59227 | 7.8 high | 1.0% | microsoft, 365_apps, 365_copilot, office | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-59234 | 7.8 high | 1.0% | microsoft, 365_apps, 365_copilot, office | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2025-62199 | 7.8 high | 1.0% | microsoft, 365_apps, 365_copilot, excel | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 18 Oct |
| CVE-2026-26129 | 7.5 high | 1.0% | microsoft, 365_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-26164 | 7.5 high | 1.0% | microsoft, 365_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-33111 | 7.5 high | 1.0% | microsoft, copilot_chat | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-54130 | 7.5 high | 1.0% | microsoft, 365_copilot | Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-42895 | 7.5 high | 1.0% | microsoft, 365_copilot | Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network. | Sun 25 Oct |
| CVE-2026-50519 | 7.5 high | 1.0% | microsoft, github_copilot_chat | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | Sun 25 Oct |
| CVE-2025-66389 | 7.5 high | 1.0% | microsoft, github_copilot | GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection. | 12 Oct |
| CVE-2026-55145 | 7.1 high | 1.0% | microsoft, copilot | Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network. | Sat 24 Oct |
| CVE-2026-23653 | 6.5 medium | 1.0% | microsoft, github_copilot_chat | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network. | Mon 26 Oct |
| CVE-2026-47282 | 6.5 medium | 1.0% | microsoft, visual_studio_code | Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | Sat 24 Oct |
| CVE-2026-65675 | 6.5 medium | 1.0% | microsoft, github_copilot_chat | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | Sat 24 Oct |
| CVE-2026-69855 | 6.5 medium | 1.0% | microsoft, azure_copilot | Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network. | 18 Oct |
| CVE-2026-33102 | 9.3 critical | 0.00% | microsoft, 365_copilot | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. | Mon 26 Oct |
| CVE-2026-59515 | 9.3 critical | 0.00% | no CPE yet | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sergey AIWU ai-copilot-content-generator allows Blind SQL Injection.This issue affects AIWU: from n/a through <= 1.5.4. | Sat 24 Oct |
| CVE-2026-41691 | 9.1 critical | 0.00% | i18next, i18next-http-backend | Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes. Versions prior to 3.0.5 interpolate the lng and ns values directly into the configured loadPath / addPath URL template without any encoding, validation, or path sanitisation. When an application exposes the language-code selection to user-controlled input (the default — i18next-browser-languagedetector reads ?lng= query params, cookies, localStorage, and request headers), an attacker can inject characters that change the structure of the outgoing request URL. This is a single URL-injection vulnerability. The attacker-controlled value is neutralised before it is used as part of an output URL string; the attack shape covers both path traversal and broader URL-structure injection — both are closed by the one interpolateUrl sanitisation fix. This issue has been fixed in version 3.0.5. If users cannot upgrade immediately, they can work around the issue by sanitising lng / ns before they reach i18next (strip .., /, \, ?, #, %, whitespace, and control characters; cap the length). | Mon 26 Oct |
| CVE-2026-40363 | 8.4 high | 0.00% | microsoft, 365_apps, 365_copilot, office | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-42831 | 7.8 high | 0.00% | microsoft, 365_copilot, office, office_long_term_servicing_channel | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | Mon 26 Oct |
| CVE-2026-50510 | 7.8 high | 0.00% | microsoft, github_copilot | Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally. | Sat 24 Oct |
| CVE-2026-70335 | 7.8 high | 0.00% | microsoft, visual_studio_code | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally. | Sat 24 Oct |
| CVE-2026-50387 | 7.8 high | 0.00% | microsoft, 365_copilot, microsoft_365, office_2021 | Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally. | 14 Oct |
| CVE-2025-62557 | 7.8 high | 0.00% | microsoft, 365_apps, 365_copilot, office | Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. | 14 Oct |
| CVE-2025-64671 | 7.8 high | 0.00% | microsoft, github_copilot | Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally. | 14 Oct |
| CVE-2026-42893 | 7.5 high | 0.00% | microsoft, outlook | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network. | Mon 26 Oct |
| CVE-2025-62449 | 6.8 medium | 0.00% | microsoft, github_copilot_chat | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally. | 18 Oct |
| CVE-2026-41614 | 6.2 medium | 0.00% | microsoft, 365_copilot | Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally. | Mon 26 Oct |
| CVE-2026-9132 | 6.0 medium | 0.00% | github, enterprise_server | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to read source code from private repositories they did not have access to. The Copilot pull request description diff summary endpoint accepted a cross-repository comparison range and rendered the resulting diff without verifying that the requesting user was authorized to view the target repository. Exploitation required an authenticated account on the instance with read access to at least one repository to use as the comparison base. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.17.17, 3.18.11, 3.19.8, and 3.20.4. This vulnerability was reported via the GitHub Bug Bounty program. | Sun 25 Oct |
| CVE-2026-55946 | 5.9 medium | 0.00% | microsoft, copilot | Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network. | 14 Oct |
| CVE-2026-6662 | 5.5 medium | 0.00% | no CPE yet | A vulnerability was found in ericc-ch copilot-api up to 0.7.0. The impacted element is the function cors of the file src/server.ts of the component Token Endpoint. Performing a manipulation results in permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. The exploit has been made public and could be used. | Mon 26 Oct |
50 of 55 · Next
Download these 55 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.