Microsoft has disclosed two critical security vulnerabilities in GitHub Copilot and Visual Studio that could allow attackers to bypass essential security features.

Both vulnerabilities were released on November 11, 2025, and have been assigned an Important severity rating.