GitHub Copilot and Visual Studio Vulnerabilities Allow Attacker to Bypass Security Feature

Microsoft disclosed two important vulnerabilities affecting Visual Studio and GitHub Copilot: CVE-2025-62449 is a CWE-22 path traversal in Visual Studio (CVSS 6.8) that can expose files outside restricted areas, and CVE-2025-62453 is an AI output validation/protection flaw in GitHub Copilot (CVSS 5.0) that could allow malicious AI-generated code suggestions to bypass security checks; both require local access and user interaction and Microsoft has released patches—developers are advised to apply updates and enforce code review for AI-generated suggestions.