MicrosoftCVE-2026-59117

Microsoft Windows Terminal App: integer overflow

High7.5CVE-2026-59117 · Published Jul 16, 2026 · updated Jul 30, 2026

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Windows Terminal App Product	>= 1.0.0, < 1.24.11321.0	1.24.11321.0

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-190

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Jul 17	Microsoft Edge (Chromium-based): authentication bypass Medium5.4Jul 17 CVE-2026-57980150.0.4078.80	Medium5.4	150.0.4078.80
Jul 17	Microsoft Windows RDP: unauthorized attacker could disclose information over High7.1Jul 17 CVE-2026-561712.1.65.2+1 more	High7.1	2.1.65.2+1 more
Jul 16	Microsoft Windows Admin Center: cross-site scripting Medium6.1Jul 16 CVE-2026-586432.6.7	Medium6.1	2.6.7
Jul 16	Microsoft Office SharePoint: cross-site scripting Medium4.6Jul 16 CVE-2026-6282616.0.5561.1001+2 more	Medium4.6	16.0.5561.1001+2 more
Jul 16	Microsoft Windows Backup Engine: race condition High7.0Jul 16 CVE-2026-5859810.0.19044.7548+4 more	High7.0	10.0.19044.7548+4 more
Jul 14	Secret exfiltration vulnerability HighJul 14 CVE-2026-472821.128.1	High	1.128.1

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.