Microsoft GitHub Copilot and Visual Studio Remote Code Execution Vulnerability

A command injection vulnerability has been identified in GitHub Copilot and Visual Studio. This issue allows an unauthorized attacker to execute code remotely. The vulnerability arises from improper neutralization of special elements used in commands, enabling exploitation through crafted prompts that manipulate the application's command execution process.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users can download the security update for Microsoft Visual Studio 2022 versions 18.3 and 17.14 through the Visual Studio Download Center. For version 18.3, the build number is 18.3.0, and for version 17.14, it is 17.14.26.