{"id":"CVE-2026-54124","details":"Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.","modified":"2026-07-24T04:02:40.710097736Z","published":"2026-07-14T18:18:08.373Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"10.0.19044.7548"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_21h2","cpes":["cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*"]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_10_22h2","cpes":["cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.19045.7548"}]},{"cpes":["cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.26100.8875"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_24h2"},{"extracted_events":[{"fixed":"10.0.26200.8875"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_25h2","cpes":["cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*"]},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_11_26h1","cpes":["cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*","cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*"],"extracted_events":[{"fixed":"10.0.28000.2269"},{"fixed":"10.0.28000.2525"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.20348.5386"}],"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2022"},{"source":"CPE_RANGE","vendor_product":"microsoft:windows_server_2025","cpes":["cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"10.0.26100.33158"}]}]},"references":[{"type":"FIX","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54124"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/microsoft/terminal","events":[{"introduced":"0"},{"fixed":"b4e69c68620a822407d45bfbba6ee10feebc70a3"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.24.11321.0"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:microsoft:terminal:*:*:*:*:*:*:*:*"}}],"versions":["v1.24.10921.0","v1.24.10621.0","v1.24.10212.0","v1.24.3504.0","v1.24.2812.0","v1.24.2682.0","v1.24.2372.0","v1.20.10293.0","v1.10.1933.0","v1.9.1445.0","v0.1.1361.0","v0.1.1211.0","v0.1.1204.0","v0.1.1161.0","v0.1.1093.0","v0.1.1025.0","v0.1.1002.0","experiment-rel-windows-inbox","experiment-master","experiment-f-ServerApp","experiment-OutsideBuild","broken-tabstops","RS2-final"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-54124.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}