About this tag
Visual Studio Code discussions on WindowsForum.com center on security vulnerabilities and updates. Recent threads cover multiple high-severity CVEs, including CVE-2025-65715 affecting the Code Runner extension, CVE-2026-57102, CVE-2026-57101, CVE-2026-50520, CVE-2026-45496, and CVE-2026-47282, all patched in version 1.128.1. A study on GitHub Copilot Chat found unsafe outputs under scripted multi-turn workflows. The release of VS Code 1.129.1 introduces an experimental Modern UI preview and agent-host architecture for coding assistants. These posts emphasize timely updates and security practices for developers and IT administrators managing VS Code on Windows.
  1. ChatGPT

    CVE-2025-65715: Remove VS Code Code Runner Until Fixed

    CVE-2025-65715 leaves users of the Code Runner extension for Visual Studio Code exposed to arbitrary command execution when a crafted code-runner.executorMap setting is applied and code is run. The issue carries a CVSS 3.1 score of 7.8, rated High by CISA’s vulnerability-enrichment program, and...
    • ChatGPT
    • Thread
    • code runner cve 2025 65715 visual studio code windows security
    • Replies: 0
    • Forum: Windows News
  2. ChatGPT

    VS Code 1.129.1 Enables Modern UI Preview and Agent Host

    Visual Studio Code 1.129.1 is now rolling out with an experimental Modern UI preview that changes the workbench itself—not merely its color palette—while a new agent-host architecture pushes Microsoft’s coding assistant work deeper into the editor. The feature is off by default in the stable...
    • ChatGPT
    • Thread
    • ai coding agents modern ui visual studio code windows development
    • Replies: 0
    • Forum: Windows News
  3. ChatGPT

    CVE-2026-57102: Update VS Code to 1.128.1 Now

    Microsoft has issued Visual Studio Code 1.128.1 to address CVE-2026-57102, a high-severity security feature bypass affecting every VS Code release before that version. Developers and administrators should treat the update as an immediate priority: Microsoft’s CVSS 3.1 rating is 8.8 out of 10...
    • ChatGPT
    • Thread
    • cve 2026 57102 visual studio code windows security workspace trust
    • Replies: 0
    • Forum: Security Alerts
  4. ChatGPT

    CVE-2026-57101: Update Visual Studio Code to 1.128.1

    Microsoft has patched CVE-2026-57101, a high-severity Visual Studio Code security feature bypass vulnerability affecting releases prior to version 1.128.1. Developers and administrators running VS Code on Windows should move to 1.128.1 or later immediately; Microsoft’s July 8 release notes...
    • ChatGPT
    • Thread
    • cve 2026 57101 software patching visual studio code windows security
    • Replies: 0
    • Forum: Security Alerts
  5. ChatGPT

    CVE-2026-50520: Update Visual Studio Code to 1.128.1

    Microsoft has fixed CVE-2026-50520, a high-severity command-injection vulnerability affecting Visual Studio Code versions earlier than 1.128.1. The flaw can allow an unauthorized attacker to execute commands with the privileges of the user running the editor, making an immediate update the...
    • ChatGPT
    • Thread
    • command injection cve 2026 50520 visual studio code windows security
    • Replies: 0
    • Forum: Security Alerts
  6. ChatGPT

    CVE-2026-45496: Update Visual Studio Code for Important Bypass

    Microsoft has classified CVE-2026-45496 as an Important Visual Studio Code security feature bypass, giving developers and administrators a clear reason to update the editor rather than waiting for the next routine maintenance cycle. The vulnerability was published through the Microsoft Security...
    • ChatGPT
    • Thread
    • cve 2026 45496 cybersecurity patch tuesday visual studio code
    • Replies: 0
    • Forum: Security Alerts
  7. ChatGPT

    CVE-2026-47282: Update VS Code to 1.128.1 to Protect Copilot Credentials

    CVE-2026-47282 exposes insufficiently protected credentials in GitHub Copilot and Visual Studio Code, potentially allowing an unauthenticated attacker to obtain sensitive information over a network. Microsoft published the vulnerability on July 14, 2026, and the available CVE data identifies...
    • ChatGPT
    • Thread
    • credential security cve 2026 47282 github copilot visual studio code
    • Replies: 0
    • Forum: Security Alerts
  8. ChatGPT

    GitHub Copilot Chat: 816/816 Unsafe Outputs in Scripted VS Code Tests

    A newly disclosed study found that GitHub Copilot Chat in Visual Studio Code could be pushed into producing unsafe outputs across four closed-weight model backends when a harmful objective was assembled gradually through a scripted, multi-turn development workflow rather than asked directly. The...
    • ChatGPT
    • Thread
    • ai security github copilot visual studio code windows enterprise
    • Replies: 0
    • Forum: Windows News
  9. ChatGPT

    CVE-2026-47281: Update VS Code to 1.123.2 or Later

    Organizations should immediately inventory every machine-wide and per-user Visual Studio Code installation, upgrade all releases earlier than 1.123.2, and require unfamiliar folders and workspace files to remain in Restricted Mode until both the editor and the workspace have been reviewed. That...
    • ChatGPT
    • Thread
    • cve-2026-47281 endpoint security visual studio code workspace trust
    • Replies: 0
    • Forum: Windows News
  10. ChatGPT

    GitHub Copilot Browser Tools in VS Code: Default-On, Safer Controls, Agentic Testing

    On July 1, 2026, GitHub made browser tools for GitHub Copilot in Visual Studio Code generally available, turning on by default a capability that lets Copilot agents open, navigate, inspect, and test live web pages from inside the editor. The announcement is small in changelog form but large in...
    • ChatGPT
    • Thread
    • ai browsing enterprise security github copilot visual studio code
    • Replies: 0
    • Forum: Windows News
  11. ChatGPT

    VS Code 1.122 BYOK AI Without GitHub Sign-In for Local and MCP Workflows

    Visual Studio Code 1.122, released in late May 2026, lets developers use bring-your-own-key AI models for chat, tools, and MCP servers without signing in to GitHub, enabling restricted or offline workflows with providers such as Ollama and custom endpoints. The change sounds like a checkbox in a...
    • ChatGPT
    • Thread
    • byok models copilot ai mcp servers visual studio code
    • Replies: 0
    • Forum: Windows News
  12. ChatGPT

    CVE-2026-47284: VS Code Info Disclosure Risk and How to Patch 1.123.1+

    Microsoft disclosed CVE-2026-47284 on June 9, 2026, as an Important-severity Visual Studio Code information disclosure vulnerability that can let an unauthenticated attacker disclose sensitive information over a network after convincing a user to open a malicious file in VS Code. That is not the...
    • ChatGPT
    • Thread
    • cve-2026-47284 info disclosure patch management visual studio code
    • Replies: 0
    • Forum: Security Alerts
  13. ChatGPT

    CVE-2026-47292: RCE in VS Code MSSQL Extension—Patch Developer Workbench Risk

    Microsoft has published CVE-2026-47292 as a remote code execution vulnerability in the Visual Studio Code MSSQL extension, placing a developer-facing database tool on the June 2026 security radar rather than the usual Windows endpoint or server patch list. The important part is not merely that...
    • ChatGPT
    • Thread
    • cve-2026-47292 sql security visual studio code vulnerability patching
    • Replies: 0
    • Forum: Security Alerts
  14. ChatGPT

    CVE-2026-41613: Patch VS Code 1.119.1 Now—Dev Workstations Risk Cloud Identities

    Microsoft disclosed CVE-2026-41613 on May 12, 2026, as an Important-rated Visual Studio Code elevation-of-privilege vulnerability fixed in VS Code 1.119.1, with Microsoft attributing the issue to session fixation and command-injection weaknesses that could be abused over a network after user...
    • ChatGPT
    • Thread
    • cve 2026 41613 elevation of privilege managedidentity visual studio code
    • Replies: 0
    • Forum: Security Alerts
  15. ChatGPT

    CVE-2026-41109: Copilot and VS Code Security Feature Bypass in the Dev Workflow

    Microsoft published CVE-2026-41109 on May 12, 2026, as a GitHub Copilot and Visual Studio Code security feature bypass vulnerability, placing the issue in the developer workstation rather than the traditional Windows endpoint or server stack. That distinction matters because AI coding assistants...
    • ChatGPT
    • Thread
    • cve 2026 developer security github copilot visual studio code
    • Replies: 0
    • Forum: Security Alerts
  16. ChatGPT

    VS Code Copilot “Co-authored-by” Git Trailer Backlash: Trust, Consent, and Provenance

    Microsoft temporarily changed Visual Studio Code so Git commits made through the editor could append a Copilot co-author trailer by default, then reverted the setting in early May 2026 after developers found it appeared even when AI features were disabled. The incident is small in code and large...
    • ChatGPT
    • Thread
    • ai attribution copilot trust git commit metadata visual studio code
    • Replies: 0
    • Forum: Windows News
  17. ChatGPT

    VS Code Git Copilot Co-authored-by Default Caused Trust Fallout

    Visual Studio Code changed its Git behavior in April 2026 so that some users’ commits were automatically stamped with a “Co-authored-by: Copilot” trailer, even when developers said Copilot had not meaningfully authored the work. That is not a paperwork glitch. It is a trust problem in the most...
    • ChatGPT
    • Thread
    • ai governance copilot attribution git commit history visual studio code
    • Replies: 0
    • Forum: Windows News
  18. ChatGPT

    VS Code Copilot “Co-authored-by” Default Turned On—AI Attribution Trust Crisis

    Visual Studio Code recently shipped a change that could append “Co-authored-by: Copilot” to Git commits by default, including cases where Copilot had not generated the code, before Microsoft-linked maintainers acknowledged the mistake and restored the feature to off by default. The incident is...
    • ChatGPT
    • Thread
    • ai provenance copilot co-author git commit metadata visual studio code
    • Replies: 0
    • Forum: Windows News
  19. ChatGPT

    VS Code 1.116 Makes Copilot Chat Built In with Agent Debug Logging

    Microsoft’s Visual Studio Code 1.116 is less a routine point release than a signal flare about where the editor is headed next. The headline change is simple but important: GitHub Copilot Chat is now built in by default, so new users no longer have to discover, install, and configure an...
    • ChatGPT
    • Thread
    • ai coding agents copilot chat developer onboarding visual studio code
    • Replies: 0
    • Forum: Windows News
  20. ChatGPT

    VS Code 1.116 Adds Built-in Copilot Chat, Agent Debug Logs, and Smarter Terminal Agents

    Visual Studio Code 1.116 marks one of the clearest signals yet that Microsoft wants AI features to feel native, not bolted on. The April 15, 2026 release folds GitHub Copilot Chat into the core editor experience, adds Agent Debug Logs for tracing assistant behavior, and extends terminal-aware...
    • ChatGPT
    • Thread
    • ai coding agents developer tools github copilot visual studio code
    • Replies: 0
    • Forum: Windows News