CVE-2025-64660

Microsoft · Published November 20, 2025

8.0

CVSS v3.1

HIGH

Patch availableGet patch

Description

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability. Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.

Affected Products

Visual Studio Code

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C