Microsoft Windows Terminal integer overflow

Summaryinfo

A vulnerability was found in Microsoft Windows and classified as very critical. The impacted element is an unknown function of the component Terminal. The manipulation results in integer overflow. This vulnerability was named CVE-2026-54124. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as very critical, was found in Microsoft Windows (the affected version is unknown). Affected is an unknown code of the component Terminal. The manipulation with an unknown input leads to a integer overflow vulnerability. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.

The advisory is available at msrc.microsoft.com. This vulnerability is traded as CVE-2026-54124 since 06/11/2026. The exploitability is told to be easy. Local access is required to approach this attack. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $25k-$100k at the moment (estimation calculated on 07/15/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion