Cannot fetch extension update

### Description

CORS errors are reported while trying to fetch extenion update information - cannot update extensions::
```
log.ts:117 ERR [Extension Host] (node:26164) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
(Use `Code --trace-deprecation ...` to show where the warning was created)
logToConsole @ log.ts:117
console.ts:139 [Extension Host] (node:26164) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
(Use `Code --trace-deprecation ...` to show where the warning was created)
log @ console.ts:139
log.ts:117 INFO [AccountPolicyGate] apply: state=inactive, reason=undefined, isRestricted=false
log.ts:117 INFO Settings Sync: Account status changed from uninitialized to unavailable
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/typescriptteam/native-preview/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/typescriptteam/native-preview/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension typescriptteam.native-preview from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
log.ts:117 INFO [perf] Render performance baseline is 30ms
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-mssql/mssql/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-mssql/mssql/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension ms-mssql.mssql from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/vscode-icons-team/vscode-icons/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/vscode-icons-team/vscode-icons/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension vscode-icons-team.vscode-icons from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-vscode/remote-repositories/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-vscode/remote-repositories/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension ms-vscode.remote-repositories from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-mssql/sql-bindings-vscode/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-mssql/sql-bindings-vscode/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension ms-mssql.sql-bindings-vscode from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/m4ns0ur/base64/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/m4ns0ur/base64/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension m4ns0ur.base64 from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/github/remotehub/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/github/remotehub/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension github.remotehub from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
log.ts:117 INFO [AgentHost] Authenticating for resource: https://api.github.com
log.ts:117 ERR [Extension Host] (node:26164) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
logToConsole @ log.ts:117
error @ log.ts:564
error @ log.ts:669
error @ logService.ts:51
(anonymous) @ remoteConsoleUtil.ts:58
$logExtensionHostMessage @ mainThreadConsole.ts:44
_doInvokeHandler @ rpcProtocol.ts:458
_invokeHandler @ rpcProtocol.ts:443
_receiveRequest @ rpcProtocol.ts:370
_receiveOneMessage @ rpcProtocol.ts:297
(anonymous) @ rpcProtocol.ts:159
_deliver @ event.ts:1391
fire @ event.ts:1422
fire @ ipc.net.ts:658
(anonymous) @ localProcessExtensionHost.ts:438
console.ts:139 [Extension Host] (node:26164) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
log @ console.ts:139
$logExtensionHostMessage @ mainThreadConsole.ts:45
_doInvokeHandler @ rpcProtocol.ts:458
_invokeHandler @ rpcProtocol.ts:443
_receiveRequest @ rpcProtocol.ts:370
_receiveOneMessage @ rpcProtocol.ts:297
(anonymous) @ rpcProtocol.ts:159
_deliver @ event.ts:1391
fire @ event.ts:1422
fire @ ipc.net.ts:658
(anonymous) @ localProcessExtensionHost.ts:438
log.ts:117 INFO [AgentHost] Authenticating for resource: https://api.github.com/repos
log.ts:117 INFO [AccountPolicyGate] apply: state=inactive, reason=undefined, isRestricted=false
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-vscode-remote/remote-wsl/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-vscode-remote/remote-wsl/latest:1 Failed to load resource: net::ERR_FAILED
log.ts:117 ERR Error while getting the latest version for the extension ms-vscode-remote.remote-wsl from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
error @ log.ts:564
error @ log.ts:669
error @ logService.ts:51
getLatestRawGalleryExtensionWithFallback @ extensionGalleryService.ts:1531
console.ts:139 [Extension Host] [INFO] 2026-09-15T13:00:17.405Z - Translations initialized.
console.ts:139 [Extension Host] [INFO] 2026-09-15T13:00:17.409Z - Extension activated!
console.ts:139 [Extension Host] [vscode-icons] v12.19.0 activated!
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
requestImpl.ts:33 POST https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery net::ERR_FAILED 503 (Service Unavailable)
request @ requestImpl.ts:33
(anonymous) @ requestService.ts:38
logAndRequest @ request.ts:104
request @ requestService.ts:38
queryRawGalleryExtensions @ extensionGalleryService.ts:1436
await in queryRawGalleryExtensions
queryGalleryExtensions @ extensionGalleryService.ts:1216
getExtensionsUsingQueryApi @ extensionGalleryService.ts:734
getExtensionsUsingResourceApi @ extensionGalleryService.ts:843
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-vscode-remote/remote-wsl/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
requestImpl.ts:33 GET https://marketplace.visualstudio.com/_apis/public/gallery/vscode/ms-vscode-remote/remote-wsl/latest net::ERR_FAILED
request @ requestImpl.ts:33
(anonymous) @ requestService.ts:38
logAndRequest @ request.ts:104
request @ requestService.ts:38
getLatestRawGalleryExtension @ extensionGalleryService.ts:1570
await in getLatestRawGalleryExtension
getLatestRawGalleryExtensionWithFallback @ extensionGalleryService.ts:1512
getLatestGalleryExtension @ extensionGalleryService.ts:851
(anonymous) @ extensionGalleryService.ts:774
getExtensionsUsingResourceApi @ extensionGalleryService.ts:771
getExtensions @ extensionGalleryService.ts:654
await in getExtensions
checkForUpdates @ extensionsWorkbenchService.ts:2086
await in checkForUpdates
(anonymous) @ extensions.contribution.ts:786
run @ extensions.contribution.ts:2057
(anonymous) @ actions.ts:741
invokeFunction @ instantiationService.ts:109
_tryExecuteCommand @ commandService.ts:99
executeCommand @ commandService.ts:63
run @ actions.ts:663
runAction @ actions.ts:199
run @ actions.ts:190
onClick @ actionViewItems.ts:177
(anonymous) @ menu.ts:521
setTimeout
(anonymous) @ window.ts:125
(anonymous) @ menu.ts:520
log.ts:117 ERR Error while getting the latest version for the extension ms-vscode-remote.remote-wsl from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
logToConsole @ log.ts:117
error @ log.ts:564
error @ log.ts:669
error @ logService.ts:51
getLatestRawGalleryExtensionWithFallback @ extensionGalleryService.ts:1531
await in getLatestRawGalleryExtensionWithFallback
getLatestGalleryExtension @ extensionGalleryService.ts:851
(anonymous) @ extensionGalleryService.ts:774
getExtensionsUsingResourceApi @ extensionGalleryService.ts:771
getExtensions @ extensionGalleryService.ts:654
await in getExtensions
checkForUpdates @ extensionsWorkbenchService.ts:2086
await in checkForUpdates
(anonymous) @ extensions.contribution.ts:786
run @ extensions.contribution.ts:2057
(anonymous) @ actions.ts:741
invokeFunction @ instantiationService.ts:109
_tryExecuteCommand @ commandService.ts:99
executeCommand @ commandService.ts:63
run @ actions.ts:663
runAction @ actions.ts:199
run @ actions.ts:190
onClick @ actionViewItems.ts:177
(anonymous) @ menu.ts:521
setTimeout
(anonymous) @ window.ts:125
(anonymous) @ menu.ts:520
workbench.html:1 Access to fetch at 'https://marketplace.visualstudio.com/_apis/public/gallery/vscode/m4ns0ur/base64/latest' from origin 'vscode-file://vscode-app' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
requestImpl.ts:33 GET https://marketplace.visualstudio.com/_apis/public/gallery/vscode/m4ns0ur/base64/latest net::ERR_FAILED
request @ requestImpl.ts:33
(anonymous) @ requestService.ts:38
logAndRequest @ request.ts:104
request @ requestService.ts:38
getLatestRawGalleryExtension @ extensionGalleryService.ts:1570
await in getLatestRawGalleryExtension
getLatestRawGalleryExtensionWithFallback @ extensionGalleryService.ts:1512
getLatestGalleryExtension @ extensionGalleryService.ts:851
(anonymous) @ extensionGalleryService.ts:774
getExtensionsUsingResourceApi @ extensionGalleryService.ts:771
getExtensions @ extensionGalleryService.ts:654
await in getExtensions
checkForUpdates @ extensionsWorkbenchService.ts:2086
await in checkForUpdates
(anonymous) @ extensions.contribution.ts:786
run @ extensions.contribution.ts:2057
(anonymous) @ actions.ts:741
invokeFunction @ instantiationService.ts:109
_tryExecuteCommand @ commandService.ts:99
executeCommand @ commandService.ts:63
run @ actions.ts:663
runAction @ actions.ts:199
run @ actions.ts:190
onClick @ actionViewItems.ts:177
(anonymous) @ menu.ts:521
setTimeout
(anonymous) @ window.ts:125
(anonymous) @ menu.ts:520
log.ts:117 ERR Error while getting the latest version for the extension m4ns0ur.base64 from https://marketplace.visualstudio.com/_apis/public/gallery/vscode/{publisher}/{name}/latest. Trying the fallback https://www.vscode-unpkg.net/_gallery/{publisher}/{name}/latest Failed
```

### Issue Details

Item|Value
---|---
Issue Category|Bug
Target|Visual Studio Code
VS Code Version|Code 1.137.0 (645f29cc3176500b4b5762ba887cf2a7f0ffdf2c, 2026-09-08T13:43:59-07:00)
OS Version|Windows_NT x64 10.0.26200

System Info

Item|Value
---|---
VS Code Version|Code 1.137.0 (645f29cc3176500b4b5762ba887cf2a7f0ffdf2c, 2026-09-08T13:43:59-07:00)
OS Version|Windows_NT x64 10.0.26200
CPUs|Intel(R) Core(TM) i5-8500 CPU @ 3.00GHz (6 x 3000)
GPU Status|2d_canvas: enabled
GPU0: VENDOR= 0x8086, DEVICE=0x3e92 [Intel(R) UHD Graphics 630], DRIVER_VENDOR=Intel, DRIVER_VERSION=30.0.101.1339 *ACTIVE*
GPU1: VENDOR= 0x1414, DEVICE=0x008c [Microsoft Basic Render Driver], DRIVER_VERSION=10.0.26100.9278
Machine model name:
Machine model version:
direct_rendering_display_compositor: disabled_off_ok
gpu_compositing: enabled
multiple_raster_threads: enabled_on
opengl: enabled_on
rasterization: enabled
raw_draw: disabled_off_ok
skia_graphite: disabled_off
trees_in_viz: disabled_off
video_decode: enabled
video_encode: enabled
webgl: enabled
webgpu: enabled
webnn: disabled_off
Load (avg)|
Memory (System)|31.78GB (9.85GB free)
Process Argv|--crash-reporter-id a079dcaa-039a-4dfb-8683-7ec01accca06
Screen Reader|no
VM|0%
User Agent|Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Code/1.137.0 Chrome/148.0.7778.280 Electron/42.10.0 Safari/537.36
Installation pure|true

Extensions (19)

Name|Identifier|Author|Version
---|---|---|---
TabOut|albert.tabout|albert|0.2.4
XML Tools|dotjoshjohnson.xml|DotJoshJohnson|2.5.1
REST Client|humao.rest-client|humao|0.25.1
Base64|m4ns0ur.base64|m4ns0ur|1.0.0
Aspire|microsoft-aspire.aspire-vscode|microsoft-aspire|1.22.0
Azure App Service|ms-azuretools.vscode-azureappservice|ms-azuretools|0.27.0
Azure Functions|ms-azuretools.vscode-azurefunctions|ms-azuretools|1.22.1
Azure Resources|ms-azuretools.vscode-azureresourcegroups|ms-azuretools|0.12.7
C# Dev Kit|ms-dotnettools.csdevkit|ms-dotnettools|3.33.194
C#|ms-dotnettools.csharp|ms-dotnettools|2.151.28
.NET Install Tool|ms-dotnettools.vscode-dotnet-runtime|ms-dotnettools|3.1.0
Azure Repos|ms-vscode.azure-repos|ms-vscode|0.40.0
Hex Editor|ms-vscode.hexeditor|ms-vscode|1.11.1
Remote Repositories|ms-vscode.remote-repositories|ms-vscode|0.42.0
Material Icon Theme|pkief.material-icon-theme|PKief|5.38.1
Paste JSON as Code|quicktype.quicktype|quicktype|23.0.170
HL7Tools|robholme.hl7tools|RobHolme|2.0.8
TypeScript 7|typescriptteam.native-preview|TypeScriptTeam|0.20260708.2
vscode-icons|vscode-icons-team.vscode-icons|vscode-icons-team|12.19.0

Theme extensions: 10

A/B Experiments

```
vsliv368cf:30146710
vswsl492cf:30256860
binariesv615:30325510
nativeloc1:31344060
dwcopilot:31170013
dwoutputs:31242946
copilot_t_ci:31333650
e5gg6876:31282496
pythonrdcb7:31342333
6518g693:31463988
aj953862:31281341
envsactivate1:31551504
gh487529:31544284
cloudbuttont:31379625
3efgi100_wstrepl:31403338
55ia6109:31457054
ec5jj548:31422691
cp_cls_t_966_ss:31526232
4je02754:31466945
8hhj4413:31478653
cp_cls_t_1081:31454832
conptydll_true:31498968
e9c30283:31461165
46204921:31447328
capico_bxe_098a3278:31582665
ei9d7968:31496641
chat:31457767
8hig5102:31480529
89g7j272:31518289
i2gc6536:31499202
52612955:31516516
ddid_c:31478207
hmra_i5g22:31518061
7df3h592:31512476
cp_cls_t_1082:31535311
logging_enabled_new:31498466
j0d79568:31499440
jb_cp_cls_t_632:31543129
56dj4588:31512888
32d76977:31512328
ha629193:31508444
jh5f2457_c:31540921
jbcp_cls_pctr_t:31531130
cp_intellij_t_nes:31548657
gf14b233:31526830
ahp-both-windows:31556933
ihg5j128:31534457
7g2b5551:31542111
nes-ex-cf-euporie-03:31542868
enable_editor_pane_layout:31569726
allow-none:31555437
ac562147:31564510
c7c27ce7:31554789
1h923230:31564177
treatment-23-1:31555779
unuse_dynamic_mcp:31555281
0d8dfbc3:31570291
0c1h4866:31566224
session-mark-done:31558131
5b8j3302:31564601
jb322307:31583825
mangle-name-treatment:31572634
allow-signed-out:31584137
intellij_nes_preview_t:31580086
39a5d156:31574986
2bfb8b39:31576696
soft:31581111
aw-autom-on:31583758
revealsession_treatment_7ed7e840:31582194
permission_prompt_control:1332567
ccr_pr_nudge_control:1319470
vsc_wsm_t:1340632
jidc7660:1370295
cfee5631:1379228
3aced641:1389836
```