Microsoft Visual Studio Code Insiders security updates
The latest version of Microsoft Visual Studio Code Insiders is 1.127.0, released June 30, 2026. Patch Radar has 10 security fixes for Microsoft Visual Studio Code Insiders, closing 22 CVEs. The newest security fix is Microsoft Visual Studio Code Insiders 1.124.0, released June 4, 2026. Version 1.127.0 adds no new CVE fixes and includes all of them. 35 CVEs have no fix yet.
CVEs with no fix yet
| Priority | CVE | Title | Status |
|---|---|---|---|
| Urgent | CVE-2026-58650 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| Urgent | CVE-2026-69278 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| Urgent | CVE-2026-70335 | GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability | no-fix |
| High | CVE-2026-102231 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-102232 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-102233 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-102234 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-102235 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-102238 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-50520 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-57101 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-57102 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-59113 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-69306 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-69320 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-69370 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-70098 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-70334 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-70336 | Visual Studio Code Remote Code Execution Vulnerability | no-fix |
| High | CVE-2026-78461 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-78462 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-81356 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-81357 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-81376 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-81378 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-81379 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| High | CVE-2026-81381 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | no-fix |
| High | CVE-2026-81383 | Visual Studio Code Information Disclosure Vulnerability | no-fix |
| Routine | CVE-2026-102229 | Visual Studio Code Information Disclosure Vulnerability | no-fix |
| Routine | CVE-2026-102851 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| Routine | CVE-2026-45496 | Visual Studio Code Security Feature Bypass Vulnerability | no-fix |
| Routine | CVE-2026-47282 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | no-fix |
| Routine | CVE-2026-47285 | Visual Studio Code Information Disclosure Vulnerability | no-fix |
| Routine | CVE-2026-81377 | Visual Studio Code Tampering Vulnerability | no-fix |
| Routine | CVE-2026-81380 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | no-fix |
Security fixes, newest first
| Priority | Fix | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|
| Latest | Microsoft Visual Studio Code Insiders 1.127.0 | 1.127.0 | Includes every fix below | Jun 30, 2026 | |
| High | Microsoft Visual Studio Code Insiders 1.124.0 | 1.124.0 | 7 | Jun 4, 2026 | |
| High | Microsoft Visual Studio Code Insiders 1.120.0 | 1.120.0 | 4 | May 5, 2026 | |
| High | Microsoft Visual Studio Code Insiders 1.110.0 | 1.110.0 | 2 | Feb 5, 2026 | |
| High | Microsoft Visual Studio Code Insiders 1.107.0 | 1.107.0 | 1 | Dec 10, 2025 | |
| Routine | Microsoft Visual Studio Code Insiders 1.105.0 | 1.105.0 | 1 | Oct 1, 2025 | |
| Urgent | Microsoft Visual Studio Code Insiders 1.104.0 | 1.104.0 | 1 | Sep 9, 2025 | |
| High | Microsoft Visual Studio Code Insiders 1.101.0 | 1.101.0 | 1 | Jun 11, 2025 | |
| Routine | Microsoft Visual Studio Code Insiders 1.100.0 | 1.100.0 | 1 | May 6, 2025 | |
| High | Microsoft Visual Studio Code Insiders 1.98.0 | 1.98.0 | 3 | Mar 4, 2025 | |
| High | Microsoft Visual Studio Code Insiders 1.88.0 | 1.88.0 | 1 | Apr 3, 2024 | |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.