gcdRadar
products/github-copilot

GitHub Copilot

Filed as: GitHub Copilot CLI, Github Copilot

Records
23
Disclosed CVEs
21
Exploited (sev 3–4)
0
CISA KEV flagged
0

Newest record 2026-11-10 · 21 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Exploited or KEV-listed · 0

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

No record for GitHub Copilot has confirmed exploitation or a KEV flag.

Disclosures by month · last 24 months

Dec ’2421 disclosed · peak 5 in Feb ’26Nov ’26

Disclosed CVEs, no confirmed exploitation · 21

  1. closed5.5
    GitHub Copilot CVE-2026-83953: Command injection vulnerability in Github Copilot

    Disclosed · since 10 Nov 2026 · CVE-2026-83953

    AI
  2. closed6.5
    GitHub Copilot GitHub Copilot and Visual Studio Code vulnerable to credential disclosure

    Disclosed · since 8 Sep 2026 · CVE-2026-81381

    AI
  3. closed5.3
    GitHub Copilot CVE-2026-81380: GitHub Copilot and VS Code command injection vulnerability

    Disclosed · since 8 Sep 2026 · CVE-2026-81380

    AI
  4. closed7.8
    GitHub Copilot CVE-2026-70335: OS command injection vulnerability in GitHub Copilot and Visual Studio Code

    Disclosed · since 11 Aug 2026 · CVE-2026-70335

    AI
  5. closed7.8
    GitHub Copilot CVE-2026-50510: Code execution vulnerability in GitHub Copilot

    Disclosed · since 14 Jul 2026 · CVE-2026-50510

    AI
  6. closed6.5
    GitHub Copilot CVE-2026-47282: Credential disclosure vulnerability in GitHub Copilot

    Disclosed · since 14 Jul 2026 · CVE-2026-47282

    AI
  7. closed7.5
    GitHub Copilot GitHub Copilot Vulnerability Allows Filesystem Access via URI Parameter

    Disclosed · since 22 Jun 2026 · CVE-2025-66389

    AI
  8. closed6.5
    GitHub Copilot CVE-2026-50519: Insecure resource default in GitHub Copilot and VS Code allows info disclosure

    Disclosed · since 19 Jun 2026 · CVE-2026-50519

    AI
  9. closed8.4
    GitHub Copilot CVE-2026-45482: Path Traversal Vulnerability in GitHub Copilot and VS Code

    Disclosed · since 9 Jun 2026 · CVE-2026-45482

    AI
  10. closed8.5
    GitHub Copilot CVE-2026-45033: GitHub Copilot CLI Arbitrary Code Execution

    Disclosed · since 13 May 2026 · CVE-2026-45033

    AI
  11. closed8.8
    GitHub Copilot CVE-2026-41109: Improper Neutralization in GitHub Copilot

    Disclosed · since 12 May 2026 · CVE-2026-41109

    AI
  12. closed5.7
    GitHub Copilot CVE-2026-23653: Command Injection Flaw in GitHub Copilot and VS Code

    Disclosed · since 14 Apr 2026 · CVE-2026-23653

    AI
  13. closed7.5
    GitHub Copilot GitHub Copilot CLI shell tool arbitrary code execution vulnerability

    Disclosed · since 6 Mar 2026 · CVE-2026-29783

    AI
  14. closed8.0
    GitHub Copilot CVE-2026-21523: Race condition in GitHub Copilot and Visual Studio

    Disclosed · since 10 Feb 2026 · CVE-2026-21523

    AI
  15. closed8.8
    GitHub Copilot CVE-2026-21516: Remote Code Execution via Command Injection in GitHub Copilot

    Disclosed · since 10 Feb 2026 · CVE-2026-21516

    AI
  16. closed8.8
    GitHub Copilot CVE-2026-21256: RCE via Command Injection in GitHub Copilot and Visual Studio

    Disclosed · since 10 Feb 2026 · CVE-2026-21256

    AI
  17. closed8.0
    GitHub Copilot CVE-2026-21257: Privilege Escalation via Command Injection in GitHub Copilot

    Disclosed · since 10 Feb 2026 · CVE-2026-21257

    AI
  18. closed8.8
    GitHub Copilot CVE-2026-21518: Command Injection Vulnerability in GitHub Copilot and VS Code

    Disclosed · since 10 Feb 2026 · CVE-2026-21518

    AI
  19. closed5.7
    GitHub Copilot CVE-2025-64660: GitHub Copilot and VS Code Access Control Vulnerability

    Disclosed · since 20 Nov 2025 · CVE-2025-64660

    AI
  20. closed5.0
    GitHub Copilot CVE-2025-62453: GitHub Copilot and VS Code Generative AI Output Validation Flaw

    Disclosed · since 11 Nov 2025 · CVE-2025-62453

    AI
  21. closed7.8
    GitHub Copilot CVE-2025-53773: Command Injection Vulnerability in GitHub Copilot and Visual Studio

    Disclosed · since 12 Aug 2025 · CVE-2025-53773

    AI

Other incidents: research and unexploited reports · 2

  1. closed
    Cursor Researchers bypass browser security in AI coding assistants

    Research · since 29 Oct 2026

    AI
  2. closed
    Cursor Rules File Backdoor: Supply Chain Attack on AI Coding Assistants

    Research · since 18 Mar 2025

    AI

Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.