CVE-2025-60721: Windows Administrator Protection Elevation of Privilege Vulnerability

CVE-2025-62449: Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability

CVE-2025-62222: Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

CVE-2025-62213: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-62453: GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

Headline

CVE-2025-59499: Microsoft SQL Server Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News