Trust Shattered: VS Code Zero-Day Exposed as Microsoft's Vulnerability Process Fails

A security researcher's public disclosure of a VS Code zero-day reflects a critical breakdown in Microsoft's coordinated vulnerability disclosure process, characterized by prolonged silence and communication failures. This shift from private coordination to public exposure accelerates the exploitation window and endangers millions of developers worldwide who rely on the widely-adopted editor. The incident reveals a systemic failure in the ecosystem's collaborative security infrastructure—one with immediate, tangible consequences for user safety.