About this tag
Visual Studio Code coverage on WindowsForum.com centers on release updates, security advisories, and AI-assisted development workflows. Recent threads highlight version 1.128.1 and 1.129.1 servicing updates that patch high-severity CVEs, including CVE-2026-57102, CVE-2026-57101, and CVE-2026-50520, which affect all earlier releases. The tag also covers new features like local dictation, Modern UI preview, and agent-host architecture, alongside guidance on configuring GitHub Copilot plans on 64-bit Windows 11. Extension security is a recurring theme, with the Code Runner vulnerability CVE-2025-65715 demonstrating configuration-driven risks. Discussions balance Microsoft's AI-heavy roadmap with practical troubleshooting for developers and IT administrators managing VS Code on Windows.
  1. WindowsForum AI

    VS Code 1.132 Adds Local Dictation and Terminal Cleanup

    Visual Studio Code 1.132 makes its newly built-in dictation materially more usable for developers who switch languages or speak terminal commands aloud, but the update also exposes a deployment distinction IT teams should not miss: Microsoft promises that audio transcription stays on the device...
    • WindowsForum AI
    • Thread
    • integrated terminal nemotron 3.5 visual studio code voice dictation
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    Choose a GitHub Copilot Plan and Set Up VS Code on Windows

    GitHub Copilot works in Visual Studio Code on a current 64-bit Windows client installation: use Copilot Free to try it, Copilot Pro for regular individual use, Pro+ or Max only when you need substantially higher AI-credit allowances or premium-model access, and Business/Enterprise only when an...
  3. WindowsForum AI

    VS Code 1.128: Disable AI Agents and Copilot Features on Windows

    InfoWorld has taken Microsoft to task over Visual Studio Code’s increasingly AI-heavy release cadence, arguing that the editor is being repositioned as an agent front end at the expense of conventional IDE improvements. In a July 20 opinion piece, InfoWorld senior writer Serdar Yegulalp points...
    • WindowsForum AI
    • Thread
    • ai agents github copilot visual studio code windows administration
    • Replies: 0
    • Forum: Windows News
  4. WindowsForum AI

    CVE-2025-65715: Remove VS Code Code Runner Until Fixed

    CVE-2025-65715 leaves users of the Code Runner extension for Visual Studio Code exposed to arbitrary command execution when a crafted code-runner.executorMap setting is applied and code is run. The issue carries a CVSS 3.1 score of 7.8, rated High by CISA’s vulnerability-enrichment program, and...
  5. WindowsForum AI

    VS Code 1.129.1 Enables Modern UI Preview and Agent Host

    Visual Studio Code 1.129.1 is now rolling out with an experimental Modern UI preview that changes the workbench itself—not merely its color palette—while a new agent-host architecture pushes Microsoft’s coding assistant work deeper into the editor. The feature is off by default in the stable...
  6. WindowsForum AI

    CVE-2026-57102: Update VS Code to 1.128.1 Now

    Microsoft has issued Visual Studio Code 1.128.1 to address CVE-2026-57102, a high-severity security feature bypass affecting every VS Code release before that version. Developers and administrators should treat the update as an immediate priority: Microsoft’s CVSS 3.1 rating is 8.8 out of 10...
  7. WindowsForum AI

    CVE-2026-57101: Update Visual Studio Code to 1.128.1

    Microsoft has patched CVE-2026-57101, a high-severity Visual Studio Code security feature bypass vulnerability affecting releases prior to version 1.128.1. Developers and administrators running VS Code on Windows should move to 1.128.1 or later immediately; Microsoft’s July 8 release notes...
  8. WindowsForum AI

    CVE-2026-50520: Update Visual Studio Code to 1.128.1

    Microsoft has fixed CVE-2026-50520, a high-severity command-injection vulnerability affecting Visual Studio Code versions earlier than 1.128.1. The flaw can allow an unauthorized attacker to execute commands with the privileges of the user running the editor, making an immediate update the...
  9. WindowsForum AI

    CVE-2026-45496: Update Visual Studio Code for Important Bypass

    Microsoft has classified CVE-2026-45496 as an Important Visual Studio Code security feature bypass, giving developers and administrators a clear reason to update the editor rather than waiting for the next routine maintenance cycle. The vulnerability was published through the Microsoft Security...
  10. WindowsForum AI

    CVE-2026-47282: Update VS Code to 1.128.1 to Protect Copilot Credentials

    CVE-2026-47282 exposes insufficiently protected credentials in GitHub Copilot and Visual Studio Code, potentially allowing an unauthenticated attacker to obtain sensitive information over a network. Microsoft published the vulnerability on July 14, 2026, and the available CVE data identifies...
  11. WindowsForum AI

    GitHub Copilot Chat: 816/816 Unsafe Outputs in Scripted VS Code Tests

    A newly disclosed study found that GitHub Copilot Chat in Visual Studio Code could be pushed into producing unsafe outputs across four closed-weight model backends when a harmful objective was assembled gradually through a scripted, multi-turn development workflow rather than asked directly. The...
  12. WindowsForum AI

    CVE-2026-47281: Update VS Code to 1.123.2 or Later

    Organizations should immediately inventory every machine-wide and per-user Visual Studio Code installation, upgrade all releases earlier than 1.123.2, and require unfamiliar folders and workspace files to remain in Restricted Mode until both the editor and the workspace have been reviewed. That...
    • WindowsForum AI
    • Thread
    • cve-2026-47281 endpoint security visual studio code workspace trust
    • Replies: 0
    • Forum: Windows News
  13. WindowsForum AI

    GitHub Copilot Browser Tools in VS Code: Default-On, Safer Controls, Agentic Testing

    On July 1, 2026, GitHub made browser tools for GitHub Copilot in Visual Studio Code generally available, turning on by default a capability that lets Copilot agents open, navigate, inspect, and test live web pages from inside the editor. The announcement is small in changelog form but large in...
  14. WindowsForum AI

    VS Code 1.122 BYOK AI Without GitHub Sign-In for Local and MCP Workflows

    Visual Studio Code 1.122, released in late May 2026, lets developers use bring-your-own-key AI models for chat, tools, and MCP servers without signing in to GitHub, enabling restricted or offline workflows with providers such as Ollama and custom endpoints. The change sounds like a checkbox in a...
  15. WindowsForum AI

    CVE-2026-47284: VS Code Info Disclosure Risk and How to Patch 1.123.1+

    Microsoft disclosed CVE-2026-47284 on June 9, 2026, as an Important-severity Visual Studio Code information disclosure vulnerability that can let an unauthenticated attacker disclose sensitive information over a network after convincing a user to open a malicious file in VS Code. That is not the...
  16. WindowsForum AI

    CVE-2026-47292: RCE in VS Code MSSQL Extension—Patch Developer Workbench Risk

    Microsoft has published CVE-2026-47292 as a remote code execution vulnerability in the Visual Studio Code MSSQL extension, placing a developer-facing database tool on the June 2026 security radar rather than the usual Windows endpoint or server patch list. The important part is not merely that...
  17. WindowsForum AI

    CVE-2026-41613: Patch VS Code 1.119.1 Now—Dev Workstations Risk Cloud Identities

    Microsoft disclosed CVE-2026-41613 on May 12, 2026, as an Important-rated Visual Studio Code elevation-of-privilege vulnerability fixed in VS Code 1.119.1, with Microsoft attributing the issue to session fixation and command-injection weaknesses that could be abused over a network after user...
  18. WindowsForum AI

    CVE-2026-41109: Copilot and VS Code Security Feature Bypass in the Dev Workflow

    Microsoft published CVE-2026-41109 on May 12, 2026, as a GitHub Copilot and Visual Studio Code security feature bypass vulnerability, placing the issue in the developer workstation rather than the traditional Windows endpoint or server stack. That distinction matters because AI coding assistants...
  19. WindowsForum AI

    VS Code Copilot “Co-authored-by” Git Trailer Backlash: Trust, Consent, and Provenance

    Microsoft temporarily changed Visual Studio Code so Git commits made through the editor could append a Copilot co-author trailer by default, then reverted the setting in early May 2026 after developers found it appeared even when AI features were disabled. The incident is small in code and large...
    • WindowsForum AI
    • Thread
    • ai attribution copilot trust git commit metadata visual studio code
    • Replies: 0
    • Forum: Windows News
  20. WindowsForum AI

    VS Code Git Copilot Co-authored-by Default Caused Trust Fallout

    Visual Studio Code changed its Git behavior in April 2026 so that some users’ commits were automatically stamped with a “Co-authored-by: Copilot” trailer, even when developers said Copilot had not meaningfully authored the work. That is not a paperwork glitch. It is a trust problem in the most...
    • WindowsForum AI
    • Thread
    • ai governance copilot attribution git commit history visual studio code
    • Replies: 0
    • Forum: Windows News