Microsoft GitHub Copilot Chat vulnerabilities

Latest Microsoft GitHub Copilot Chat CVEs

Newest publication first

1. CVE-2026-50519 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

   Published 2026-06-19

   Medium·CVSS 6.5

   Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.