CVE-2025-64671 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.
High CVSS: 8.4

CVE-2025-64671

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.
Vendor
Microsoft
Product
Github Copilot
CWE
CWE-77
Yayın Tarihi
2025-12-09 18:16:06
Güncelleme
2025-12-12 13:57:32
Source Identifier
secure@microsoft.com
KEV Date Added
-

Kategoriler

CWE-77 Github Copilot HIGH Microsoft 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64671