High
Security advisory
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-54124
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:28 UTC · Revision 1
Source evidence
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.
osv:CVE-2026-54124
Complete source record
{
"id": "85e1e008fbaf33c26f63f0f548fc956a391bd79761873a6b6053895d388a5e94",
"url": "https://osv.dev/vulnerability/CVE-2026-54124",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2026-54124",
"summary": "Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.",
"evidence": "osv:CVE-2026-54124",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-54124",
"aliases": [
"CVE-2026-54124"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/microsoft/terminal",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "b4e69c68620a822407d45bfbba6ee10feebc70a3"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:microsoft:terminal:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.24.11321.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v1.24.10921.0",
"v1.24.10621.0",
"v1.24.10212.0",
"v1.24.3504.0",
"v1.24.2812.0",
"v1.24.2682.0",
"v1.24.2372.0",
"v1.20.10293.0",
"v1.10.1933.0",
"v1.9.1445.0",
"v0.1.1361.0",
"v0.1.1211.0",
"v0.1.1204.0",
"v0.1.1161.0",
"v0.1.1093.0",
"v0.1.1025.0",
"v0.1.1002.0",
"experiment-rel-windows-inbox",
"experiment-master",
"experiment-f-ServerApp",
"experiment-OutsideBuild",
"broken-tabstops",
"RS2-final"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54124.json",
"vanir_signatures": [
{
"id": "CVE-2026-54124-0b5ad770",
"digest": {
"threshold": 0.9,
"line_hashes": [
"158544783531842384038550400660472977859",
"19356149969846921741492768641883248445",
"76592976756434833814239589810103969773",
"282729630917441138452367480643136002082",
"100725073401287177550254162285107900445",
"255895525385039152092031852363079807160",
"132757266032248330328245045716382798306",
"66322706696764102286815351402957786960",
"69524662526205697280732818058546384742",
"330800896399634479638620630232541204893",
"63023319149774050960125992398873200987",
"115986887373827876102682101560048162083",
"119258988697698457769296765622298402469",
"272903554109805218291471486057437075253"
]
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/TerminalApp/TerminalPage.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2026-54124-466954f8",
"digest": {
"length": 40398,
"function_hash": "174617317527413751772409919194478734325"
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/UnitTests_SettingsModel/SerializationTests.cpp",
"function": "SerializationTests::GlobalSettings"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2026-54124-8119f306",
"digest": {
"length": 560,
"function_hash": "130456881565387251875022135057741572226"
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/TerminalApp/TerminalPage.cpp",
"function": "TerminalPage::_IsUriConsideredSomewhatSafe"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2026-54124-9dfeb09a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"22663576988013052294459324505897955102",
"126533279970555153045858330083526086186",
"301091842959873748065897222464987344441",
"66679943922594342204238675300857036421"
]
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/TerminalSettingsModel/MTSMSettings.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2026-54124-c7b0ce81",
"digest": {
"length": 1475,
"function_hash": "4628324167451686503767807702927314621"
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/TerminalSettingsModel/GlobalAppSettings.cpp",
"function": "GlobalAppSettings::Copy"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2026-54124-da5349f4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"153799954250843224331205091200608347127",
"122039669970454565065658154267072675975",
"102461542951099276894479326034696688962",
"64093108793929212489794191074229489034"
]
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/TerminalSettingsModel/GlobalAppSettings.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2026-54124-de2ff978",
"digest": {
"threshold": 0.9,
"line_hashes": [
"327373305498072302625406020557843476296",
"51335485822313779874836242041619896301",
"101120280511191929824703464294394691360",
"10115527556910116986011467371764323119"
]
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/UnitTests_SettingsModel/SerializationTests.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2026-54124-f9fb5b06",
"digest": {
"threshold": 0.9,
"line_hashes": [
"289390255240510074195556703004088028549",
"166017741051268355510753050595697470653",
"214628346482613421819035379447018273330",
"76966084463598857311660730227468384808"
]
},
"source": "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
"target": {
"file": "src/cascadia/TerminalApp/TerminalPage.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:39:15Z"
}
}
],
"modified": "2026-10-24T14:39:15.845184104Z",
"provider": "osv",
"references": [
"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54124"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"
],
"vendor_product": "microsoft:windows_10_21h2",
"extracted_events": [
{
"range": [
{
"fixed": "10.0.19044.7548"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"
],
"vendor_product": "microsoft:windows_10_22h2",
"extracted_events": [
{
"range": [
{
"fixed": "10.0.19045.7548"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*"
],
"vendor_product": "microsoft:windows_11_24h2",
"extracted_events": [
{
"range": [
{
"fixed": "10.0.26100.8875"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*"
],
"vendor_product": "microsoft:windows_11_25h2",
"extracted_events": [
{
"range": [
{
"fixed": "10.0.26200.8875"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
"cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*"
],
"vendor_product": "microsoft:windows_11_26h1",
"extracted_events": [
{
"range": [
{
"fixed": "10.0.28000.2269"
},
{
"fixed": "10.0.28000.2525"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"
],
"vendor_product": "microsoft:windows_server_2022",
"extracted_events": [
{
"range": [
{
"fixed": "10.0.20348.5386"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"
],
"vendor_product": "microsoft:windows_server_2025",
"extracted_events": [
{
"range": [
{
"fixed": "10.0.26100.33158"
}
],
"source": "CPE_RANGE"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2026-54124",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443811,
"published_at": "2026-07-14T18:18:08.373+00:00"
}