CVE-2026-65675CWE-284CWE-862broken-access-control

CVE-2026-65675

High · published August 11, 2026

CVSS v3.1

7.1

EPSS

Percentile

49.9

In the wild

Unconfirmed

What it is

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.

The record

Technical detail

CVSS v3.1: 7.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
CVSS v4.0: Not supplied
EPSS: 0.00637 · 49.9th percentile
Weaknesses: CWE-284 · Improper Access Control; CWE-862 · Missing Authorization
Published: 2026-08-11T21:18Z

Affected products (1)

Product	Versions	Fixed in
microsoft/github_copilot_chat	all versions	—

References (1)

EPSS history

Timeline