Multiple vulnerabilities in Microsoft Open Source Software

Description

Multiple vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in GitHub: Zero Shot SCFoundation can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-26030

• CVE-2026-23654

Exploitation

Public exploits exist for this vulnerability.

Related products

• GitHub-Copilot-Plugin

CVE list

• CVE-2026-26030
  critical
• CVE-2026-23654
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com