Vulnerability index

Browse CVEs

73 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Command InjectionCWE-77 × clear
Github Copilot HIGH 7.8
CVE-2026-21516

Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an unauthorized attacker to execute code…

Fix: 1.5.63-243+
Fix from $1,950 2026-02-10
Visual Studio 2022 HIGH 8.8
CVE-2026-21256

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attack…

Fix: 17.14.26+
Fix from $1,950 2026-02-10
Visual Studio 2022 HIGH 8.0
CVE-2026-21257

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an authorized attacker…

Fix: 17.14.26+
Fix from $1,950 2026-02-10
Windows Notepad HIGH 7.8
CVE-2026-20841EPSS 12%

Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute…

Fix: 11.2510+
Fix from $1,950 2026-02-10
Copilot Studio HIGH 7.5
CVE-2026-21520

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through …

Mitigation only
Fix from $1,950 2026-01-22
Github Copilot HIGH 7.8
CVE-2025-64671

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locall…

Fix: 1.5.60-243+
Fix from $1,950 2025-12-09
Windows 10 1607 HIGH 7.8
CVE-2025-54100

Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized attacker to execute …

Fix: 10.0.14393.8688 / 10.0.17763.8146+
Fix from $1,950 2025-12-09
Github Copilot Chat HIGH 8.8
CVE-2025-62222

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthoriz…

Fix: 0.32.5+
Fix from $1,950 2025-11-11
Visual Studio 2022 MEDIUM 6.7
CVE-2025-62214

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code lo…

Fix: 17.14.17+
Fix from $1,600 2025-11-11
365 Copilot Chat CRITICAL 9.3
CVE-2025-59286

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose informatio…

Mitigation only
Fix from $2,300 2025-10-09
365 Word Copilot CRITICAL 9.3
CVE-2025-59252

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to disclose informatio…

Mitigation only
Fix from $2,300 2025-10-09
365 Copilot Chat CRITICAL 9.3
CVE-2025-59272

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to perform information…

Mitigation only
Fix from $2,300 2025-10-09
Visual Studio Code CRITICAL 9.8
CVE-2025-55319

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.

Fix: 1.104.0+
Fix from $2,300 2025-09-12
Sql Server 2016 HIGH 8.8
CVE-2025-55227

Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges…

Fix: 13.0.6470.1 / 13.0.7065.1+
Fix from $1,950 2025-09-09
Visual Studio 2022 HIGH 7.8
CVE-2025-53773

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attack…

Fix: 17.14.12+
Fix from $1,950 2025-08-12
365 Copilot Chat HIGH 7.5
CVE-2025-53774

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

No fix yet
Fix from $1,950 2025-08-07
365 Copilot Chat HIGH 7.5
CVE-2025-53787

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

No fix yet
Fix from $1,950 2025-08-07
Visual Studio 2022 HIGH 7.1
CVE-2025-47959EPSS 7%

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code ov…

Fix: 17.8.22 / 17.10.16+
Fix from $1,950 2025-06-13
Visual Studio 2019 HIGH 7.8
CVE-2025-32702

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code …

Fix: 16.11.47 / 17.8.21+
Fix from $1,950 2025-05-13
Azure Arc HIGH 7.0
CVE-2025-26627

Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges …

Fix: 1.0.10+
Fix from $1,950 2025-03-11
Azure Command Line Interface HIGH 8.4
CVE-2025-24049

Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized at…

Fix: 2.69.0+
Fix from $1,950 2025-03-11
Azure Database For Postgresql Flexible Server HIGH 7.2
CVE-2024-49042

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

Fix: 12.20 / 13.16+
Fix from $1,950 2024-11-12
Azure Database For Postgresql Flexible Server HIGH 7.2
CVE-2024-43613

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

Fix: 12.20 / 13.16+
Fix from $1,950 2024-11-12
365 Apps HIGH 7.8
CVE-2024-49026

Microsoft Excel Remote Code Execution Vulnerability

Patch available
Fix from $1,950 2024-11-12
Azure Command Line Interface CRITICAL 9.1
CVE-2024-43591

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

Fix: 2.65.0+
Fix from $2,300 2024-10-08
Visual Studio Code HIGH 7.8
CVE-2024-43601

Visual Studio Code for Linux Remote Code Execution Vulnerability

Fix: 1.94.1+
Fix from $1,950 2024-10-08
Deepspeed HIGH 7.8
CVE-2024-43497

DeepSpeed Remote Code Execution Vulnerability

Fix: 0.15.1+
Fix from $1,950 2024-10-08
Sharepoint Server HIGH 7.2
CVE-2024-38227EPSS 8%

Microsoft SharePoint Server Remote Code Execution Vulnerability

Patch available
Fix from $1,950 2024-09-10
Sharepoint Server HIGH 7.2
CVE-2024-38228

Microsoft SharePoint Server Remote Code Execution Vulnerability

Patch available
Fix from $1,950 2024-09-10
Defender For Iot HIGH 7.2
CVE-2024-21322

Microsoft Defender for IoT Remote Code Execution Vulnerability

Fix: 24.1.3+
Fix from $1,950 2024-04-09