CVE-2026-54124Patch(microsoft / terminal)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch microsoft terminal systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • terminal
  • windows_10_21h2
  • windows_10_22h2
  • windows_11_24h2

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
terminalwindows_10_21h2windows_10_22h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2022windows_server_2025

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-15: 2Patch / Workaround · 2026-07-15: 2Technical Details · 2026-07-15: 107-15
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • Dhiraj@RandomDhiraj
    Patch

    w00t! Microsoft Patch Tuesday included my (CVE-2026-54124). https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54124 #infosec

    Post summary

    The tweet announces that Microsoft Patch Tuesday includes CVE‑2026‑54124 and links to the official patch guide, indicating the availability of a fix.

    120921.2K
    3.4K followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 Windows Terminal has an RCE bug, because apparently even the app that launches your commands needed a security update. Install July’s patches and update to 1.24.11321.0—or later. https://windowsforum.com/threads/cve-2026-54124-update-windows-terminal-to-1-24-11321-0.438800/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #WindowsTerminal #PatchTuesday #Cve202654124 https://t.co/mxv6mPIbV3

    Post summary

    The post highlights a CVE‑2026‑54124 RCE vulnerability in Windows Terminal and urges users to apply July patches and update to version 1.24.11321.0 or newer.

    0000017
    1.2K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftterminal---
OSmicrosoftwindows_10_21h2---
OSmicrosoftwindows_10_22h2---
OSmicrosoftwindows_11_24h2---
OSmicrosoftwindows_11_25h2---
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more