CVE-2026-47282

Microsoft · Published July 14, 2026

6.5

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability. Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected Products

Visual Studio Code

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C