VulnSocial

CVE-2026-59117General(microsoft / terminal)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft terminal systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.

microsoft CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • terminal

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 2 classified signals
  • False Positive: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-07-16); latest day: 1
  • 5 total mentions across 3 days

Affected systems

Vendors
microsoft
Products
terminal

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 3d
01122Mentions · 2026-07-16: 2Mentions · 2026-07-17: 2Mentions · 2026-07-18: 1Patch / Workaround · 2026-07-17: 1Patch / Workaround · 2026-07-18: 1Technical Details · 2026-07-17: 1Technical Details · 2026-07-18: 107-1607-1707-18
Signal classification4 categories
General
240.0%
False Positive
120.0%
Patch
120.0%
Disclosure
120.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-162
False Positive1General1
2026-07-172
General1Patch1
2026-07-181
Disclosure1
Full discourse5 posts
  • The Dustin Childs@dustin_childs
    Patch

    As if Tuesday wasn't enough, #Microsoft released 4 patches yesterday: CVE-2026-56171: RDP Information Disclosure Vulnerability CVE-2026-58598: Backup Service EoP Vulnerability CVE-2026-58643: Admin Center Spoofing Vulnerability CVE-2026-59117: Windows Terminal RCE Vulnerability

    Post summary

    Microsoft has just released patches for four CVEs affecting RDP, backup service, admin center, and Windows Terminal, covering information disclosure, elevation of privilege, spoofing, and RCE vulnerabilities.

    001961.3K
    2.4K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    #CVE-2026-59117 - Integer overflow in Wraparound Windows Terminal enables network-based RCE. #CVSS 7.5. No patch available. Monitor systems and restrict network access. #CVEAlert #infosec #cybersecurity #devops #developer #devsecops #sysadmin https://www.valtersit.com/cve/CVE-2026-59117/

    Post summary

    A new CVE‐2026‑59117 integer overflow in Windows Terminal enables network‐based RCE (CVSS 7.5) with no patch yet; recommend monitoring and restricting network access.

    0000073
    984 followersView on X
  • VulDB 🛡@vuldb
    General

    Some increased actor activities are shown targeting Microsoft Windows (CVE-2026-59117) https://vuldb.com/vuln/379674/cti

    Post summary

    The message notes that actors are increasingly targeting Microsoft Windows CVE-2026-59117, but it offers no technical or exploit specifics.

    00000101
    2.3K followersView on X
  • VulDB 🛡@vuldb
    General

    The severity is increased for this new vulnerability affecting Microsoft Windows (CVE-2026-59117) https://vuldb.com/vuln/379674

    Post summary

    The post notes an increased severity for CVE‑2026‑59117 but provides no details on exploitation, patches, or technical specifics.

    00000131
    2.3K followersView on X
  • Windows Forum@windowsforum
    False Positive

    🪟 CVE-2026-59117 isn’t a patch-now panic button—public records don’t verify the alleged Windows Terminal RCE. Admins: confirm the advisory before chasing a ghost through your update queue. https://windowsforum.com/threads/cve-2026-59117-verify-before-treating-as-windows-terminal-rce.438985/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsTerminal #PatchManagement #VulnerabilityVerification https://t.co/9iGokymefJ

    Post summary

    The post indicates that CVE-2026‑59117 may be a false positive, urging administrators to verify official advisories before pursuing any patching action.

    0000066
    1.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftterminal---

Explore more

Back to dashboardmicrosoft CVEsterminal vulnerabilities