CVE-2026-54124

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-54124

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54124.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-54124

Published

2026-07-14T18:18:08Z

Modified

2026-10-24T14:39:15Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "10.0.19044.7548"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "microsoft:windows_10_21h2"
        },
        {
            "cpes":  [
                "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "10.0.19045.7548"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "microsoft:windows_10_22h2"
        },
        {
            "cpes":  [
                "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "10.0.26100.8875"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "microsoft:windows_11_24h2"
        },
        {
            "cpes":  [
                "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "10.0.26200.8875"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "microsoft:windows_11_25h2"
        },
        {
            "cpes":  [
                "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
                "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "10.0.28000.2269"
                        },
                        {
                            "fixed":  "10.0.28000.2525"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "microsoft:windows_11_26h1"
        },
        {
            "cpes":  [
                "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "10.0.20348.5386"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "microsoft:windows_server_2022"
        },
        {
            "cpes":  [
                "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "10.0.26100.33158"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "microsoft:windows_server_2025"
        }
    ]
}

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54124

Affected packages

Git / github.com/microsoft/terminal

Affected ranges

Type

GIT

Repo

https://github.com/microsoft/terminal

Events

Introduced

Fixed

b4e69c68620a822407d45bfbba6ee10feebc70a3

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:microsoft:terminal:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.24.11321.0"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

Other

RS2-final

broken-tabstops

experiment-OutsideBuild

experiment-f-ServerApp

experiment-master

experiment-rel-windows-inbox

v0.*

v0.1.1002.0

v0.1.1025.0

v0.1.1093.0

v0.1.1161.0

v0.1.1204.0

v0.1.1211.0

v0.1.1361.0

v1.*

v1.10.1933.0

v1.20.10293.0

v1.24.10212.0

v1.24.10621.0

v1.24.10921.0

v1.24.2372.0

v1.24.2682.0

v1.24.2812.0

v1.24.3504.0

v1.9.1445.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54124.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "158544783531842384038550400660472977859",
                "19356149969846921741492768641883248445",
                "76592976756434833814239589810103969773",
                "282729630917441138452367480643136002082",
                "100725073401287177550254162285107900445",
                "255895525385039152092031852363079807160",
                "132757266032248330328245045716382798306",
                "66322706696764102286815351402957786960",
                "69524662526205697280732818058546384742",
                "330800896399634479638620630232541204893",
                "63023319149774050960125992398873200987",
                "115986887373827876102682101560048162083",
                "119258988697698457769296765622298402469",
                "272903554109805218291471486057437075253"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-54124-0b5ad770",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/TerminalApp/TerminalPage.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "174617317527413751772409919194478734325",
            "length":  40398
        },
        "id":  "CVE-2026-54124-466954f8",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/UnitTests_SettingsModel/SerializationTests.cpp",
            "function":  "SerializationTests::GlobalSettings"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "130456881565387251875022135057741572226",
            "length":  560
        },
        "id":  "CVE-2026-54124-8119f306",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/TerminalApp/TerminalPage.cpp",
            "function":  "TerminalPage::_IsUriConsideredSomewhatSafe"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "22663576988013052294459324505897955102",
                "126533279970555153045858330083526086186",
                "301091842959873748065897222464987344441",
                "66679943922594342204238675300857036421"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-54124-9dfeb09a",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/TerminalSettingsModel/MTSMSettings.h"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "4628324167451686503767807702927314621",
            "length":  1475
        },
        "id":  "CVE-2026-54124-c7b0ce81",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/TerminalSettingsModel/GlobalAppSettings.cpp",
            "function":  "GlobalAppSettings::Copy"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "153799954250843224331205091200608347127",
                "122039669970454565065658154267072675975",
                "102461542951099276894479326034696688962",
                "64093108793929212489794191074229489034"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-54124-da5349f4",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/TerminalSettingsModel/GlobalAppSettings.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "327373305498072302625406020557843476296",
                "51335485822313779874836242041619896301",
                "101120280511191929824703464294394691360",
                "10115527556910116986011467371764323119"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-54124-de2ff978",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/UnitTests_SettingsModel/SerializationTests.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "289390255240510074195556703004088028549",
                "166017741051268355510753050595697470653",
                "214628346482613421819035379447018273330",
                "76966084463598857311660730227468384808"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-54124-f9fb5b06",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/microsoft/terminal/commit/b4e69c68620a822407d45bfbba6ee10feebc70a3",
        "target":  {
            "file":  "src/cascadia/TerminalApp/TerminalPage.h"
        }
    }
]

vanir_signatures_modified

"2026-10-24T14:39:15Z"