PT-2026-58515 · Microsoft · Windows Terminal

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-54124

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Terminal (affected versions not specified)

Description An integer overflow or wraparound occurs in Windows Terminal, which could allow an unauthorized attacker to execute code locally. An integer overflow happens when an arithmetic operation attempts to create a numeric value that is too large to be stored in the allocated memory space.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-190

CWE-122

Related Identifiers

CVE-2026-54124

Affected Products

Windows Terminal

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-54124 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54124 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-54124 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54124 · Security Note
• https://twitter.com/RandomDhiraj/status/2077386574489403638 · Twitter Post