CVE-2026-59117

Analyzed Analyzed - Analysis Complete

Integer Overflow in Windows Terminal Leads to Remote Code Execution

Publication date: 2026-07-16

Last updated on: 2026-07-30

Assigner: Microsoft Corporation

Description

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-16

Last Modified

2026-07-30

Generated

2026-08-06

AI Q&A

2026-07-17

EPSS Evaluated

2026-08-04

NVD

CVE-2026-59117

EUVD

EUVD-2026-45059

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	terminal	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This vulnerability is an integer overflow or wraparound flaw in Windows Terminal. It allows an unauthorized attacker to execute arbitrary code over a network by exploiting this issue.

Detection Guidance

This vulnerability involves an integer overflow in Windows Terminal allowing remote code execution. Detection requires checking for unusual network activity or suspicious processes related to Windows Terminal. Use tools like Process Explorer or Windows Event Viewer to monitor for unexpected terminal.exe behavior or network connections.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially leading to unauthorized access, data theft, or further compromise of your device.

Compliance Impact

This vulnerability could potentially lead to unauthorized code execution, which may result in unauthorized access to sensitive data. This could impact compliance with GDPR due to potential data breaches and HIPAA due to unauthorized access to protected health information.

Mitigation Strategies

Apply the latest security updates from Microsoft for Windows Terminal immediately. Disable network access to Windows Terminal if not required. Monitor network traffic for unusual activity targeting Windows Terminal.

Hi! I’m here to help you understand CVE-2026-59117. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70