CVE-2026-47282 MEDIUM

CVE-2026-47282: GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Vendor Microsoft

Product Visual Studio Code

Weakness CWE-522 · Insufficiently protected credentials

Published July 14, 2026

Last update July 24, 2026

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Key dates

July 14, 2026 CVE published

July 24, 2026 Record updated

External resources

Related vulnerabilities