VSCODE-2026-07-14

UNKNOWN

Visual Studio Code security update — 2026-07-14

Published Jul 14, 2026

Modified 3 days ago

Fix available

Details

Microsoft published a Visual Studio Code security update on 2026-07-14 addressing 6 CVEs. See https://code.visualstudio.com/updates/v1_128 for the full release notes.

Affected Packages

code

AlmaLinux 10AlmaLinux 8AlmaLinux 9AmazonLinux 2AmazonLinux 2023

Fixed in:

1.128.1

Microsoft Visual Studio Code

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

1.128.1

Microsoft Visual Studio Code (User)

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

1.128.1

Visual Studio Code

macOS 14macOS 15macOS 26

Fixed in:

1.128.1

References

ADVISORY

https://code.visualstudio.com/updates/v1_128

Upstream

MICROSOFT-CVE-2026-41109 MICROSOFT-CVE-2026-45496 MICROSOFT-CVE-2026-47282 MICROSOFT-CVE-2026-50520 MICROSOFT-CVE-2026-57101 MICROSOFT-CVE-2026-57102

Ecosystems(247)

AlmaLinux 10 AlmaLinux 8 AlmaLinux 9 AmazonLinux 2 AmazonLinux 2023

Timeline

PublishedJul 14, 2026

ModifiedJul 14, 2026