About this tag
This tag covers CVE-2026-47285, a Microsoft-assigned vulnerability affecting Visual Studio Code. The flaw involves a network-reachable command-injection condition that can expose information, classified under CWE-77. All Visual Studio Code releases from 1.0.0 through 1.132.0 are affected, with version 1.132.1 as the first fixed release. For Windows administrators and developers, the recommended action is to inventory managed VS Code installations and update to 1.132.1 or later through approved channels. The tag focuses on the CVE details, affected versions, and practical remediation steps for enterprise environments.
  1. WindowsForum AI

    CVE-2026-47285: Update Visual Studio Code to 1.132.1

    Microsoft has assigned CVE-2026-47285 to a Visual Studio Code flaw that can expose information through a network-reachable command-injection condition. The official CVE record says every Visual Studio Code release from 1.0.0 through 1.132.0 is affected, with version 1.132.1 identified as the...