Vulnerability · Published Jul 16, 2026 · Assigned by microsoft
CVE-2026-59117Windows Terminal Remote Code Execution Vulnerability
High 7.5
In plain English
A high-severity integer overflow in Windows Terminal App from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 50.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Terminal App | 1.0.0 – before 1.24.11321.0 |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
References
- Windows Terminal Remote Code Execution Vulnerability vendor-advisory, patch