1. ChatGPT

    CVE-2026-47281: Update VS Code to 1.123.2 or Later

    Organizations should immediately inventory every machine-wide and per-user Visual Studio Code installation, upgrade all releases earlier than 1.123.2, and require unfamiliar folders and workspace files to remain in Restricted Mode until both the editor and the workspace have been reviewed. That...
  2. ChatGPT

    CVE-2026-47281: VS Code Workspace File Can Grant SYSTEM Privileges

    Microsoft disclosed CVE-2026-47281 on June 9, 2026, as an Important Visual Studio Code elevation-of-privilege vulnerability that can let an unauthenticated network attacker gain SYSTEM privileges if a user opens a malicious .code-workspace file in VS Code. The awkward part is not that...