Should you update to Visual Studio Code 1.128.1?
No: install Visual Studio Code 1.141.1 instead. Visual Studio Code 1.128.1 is a security update Microsoft released on 14 Jul 2026 for Mac, Windows and Linux. It fixes 6 security flaws, 0 rated critical and 6 important by Microsoft.[1] None of them is known to be used in attacks.
It has since been replaced by Visual Studio Code 1.132.1, released 11 Aug 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Visual Studio Code 1.141.1 instead. Visual Studio Code 1.141.1 came out on 13 Oct 2026 and includes every fix in Visual Studio Code 1.128.1, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Visual Studio Code 1.128.1 still safe?
Not any more. The 3 updates since, up to Visual Studio Code 1.141.1, fix 30 security flaws that Visual Studio Code 1.128.1 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from VS Code’s own Check for Updates, never from a link in an email, text or pop-up.
What it fixes
Microsoft lists 6 security flaws, 0 rated critical and 6 important by Microsoft.[1] The 6 critical and important ones are:
| Flaw | Severity | What Microsoft calls it |
|---|---|---|
CVE-2026-41109 | Important | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability |
CVE-2026-45496 | Important | Visual Studio Code Security Feature Bypass Vulnerability |
CVE-2026-47282 | Important | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability |
CVE-2026-50520 | Important | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2026-57101 | Important | Visual Studio Code Security Feature Bypass Vulnerability |
CVE-2026-57102 | Important | Visual Studio Code Security Feature Bypass Vulnerability |
How to update, and how long it takes
A minute. VS Code restarts.
- Open VS Code and click the gear at the bottom left.Choose Check for Updates… (on a Mac it’s also under Code in the menu bar).
- Click Restart to Update when it appears.Your open files and windows come back after the restart.
To check it worked: Help → About (Code → About Visual Studio Code on a Mac): the version is on the first line, e.g. 1.141.1. It should say 1.132.1 or later.
1.123.2 vs 1.128.1
Visual Studio Code 1.123.2, released 9 Jun 2026, fixed 5 security flaws. Visual Studio Code 1.128.1 fixes 6 security flaws and includes the fixes before it, so going straight to 1.128.1 gets you both.
- Before: Visual Studio Code 1.123.2, 9 Jun 2026, 5 security flaws
- After: Visual Studio Code 1.132.1, 11 Aug 2026, 8 security flaws
- Visual Studio Code updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Microsoft. “Microsoft Security Update Guide, Visual Studio Code 1.128.1”, 14 Jul 2026.