Visual Studio Code

Everything Patch Herald has reported about Visual Studio Code: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

CVE-2026-81376: 9.6-score VS Code flaw in versions before 1.136.2 allows trust bypass via user interaction

Microsoft patches a critical flaw in Visual Studio Code that allows attackers to bypass safety protections and run code with user permissions.

Oct 19, 2026

Vulnerabilities

1.141.1 Patch Fixes High-Severity Encoding Error Allowing Network RCE in Visual Studio Code

Microsoft confirms a high-severity encoding error in Visual Studio Code versions below 1.141.1 allows unauthorized remote code execution over a network.

Oct 15, 2026