CVE-2025-64660
published 2025-11-20CVE-2025-64660: Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.
high8CVSS 3.1
AVNACLPRLUIRSUCHIHAH
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | visual_studio_code | < 1.106.2 | 1.106.2 |
| microsoft | visual_studio_code | >= 1.0.0 < 1.106.2 | 1.106.2 |
| msrc | visual_studio_code | — | — |