CVE-2025-53773 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execu…
High CVSS: 7.8

CVE-2025-53773

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.
Vendor
Microsoft
Product
Visual Studio 2022
CWE
CWE-77
Yayın Tarihi
2025-08-12 18:15:45
Güncelleme
2025-08-15 17:01:01
Source Identifier
secure@microsoft.com
KEV Date Added
-

Kategoriler

CWE-77 Visual Studio 2022 HIGH Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53773 https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/ https://news.ycombinator.com/item?id=44883108