Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3060▲ 560 respecto a la semana anterior
Críticas / altas1458▲ 280 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▲ 175 respecto a la semana anterior
14 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.64% | — | Microsoft Github Copilot Chat | 11/8/2026 | 24/9/2026 | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network. | |
| Analizada | Alta (7.5) | 0.92% | — | Microsoft Github Copilot Chat | 19/6/2026 | 17/8/2026 | Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (7.5) | 0.92% | — | Microsoft Copilot Chat | 4/6/2026 | 23/7/2026 | Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Alta (7.5) | 1.0% | — | Microsoft Copilot Chat | 7/5/2026 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network. | |
| Modificada | Alta (7.5) | 1.0% | — | Microsoft 365 Copilot Chat | 7/5/2026 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. | |
| Modificada | Alta (7.5) | 1.0% | — | Microsoft 365 Copilot Chat | 7/5/2026 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. | |
| Analizada | Media (6.5) | 0.74% | — | Microsoft Github Copilot Chat | 14/4/2026 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network. | |
| Modificada | Crítica (9.9) | 0.72% | — | Microsoft 365 Copilot Chat | 19/3/2026 | 17/6/2026 | Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network. | |
| Analizada | Media (6.8) | 0.47% | — | Microsoft Github Copilot Chat | 11/11/2025 | 17/6/2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to bypass a security feature locally. | |
| Analizada | Alta (8.8) | 0.75% | — | Microsoft Github Copilot Chat | 11/11/2025 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network. | |
| Modificada | Crítica (9.3) | 0.57% | — | Microsoft 365 Copilot Chat | 9/10/2025 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose information over a network. | |
| Modificada | Crítica (9.3) | 0.57% | — | Microsoft 365 Copilot Chat | 9/10/2025 | 17/6/2026 | Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information disclosure locally. | |
| Analizada | Alta (7.5) | 0.71% | — | Microsoft 365 Copilot Chat | 7/8/2025 | 17/6/2026 | Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | |
| Analizada | Alta (7.5) | 0.61% | — | Microsoft 365 Copilot Chat | 7/8/2025 | 17/6/2026 | Microsoft 365 Copilot BizChat Information Disclosure Vulnerability |