CVE-2025-62453

Summary

Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature locally.

Affected Software

Weaknesses

• CWE-1426: CWE-1426: Improper Validation of Generative AI Output
• CWE-693: CWE-693: Protection Mechanism Failure

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62453

• ←Previous
• Next→