CVE-2026-59117— Windows Terminal Remote Code Execution Vulnerability
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Windows Terminal App | - | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-59117
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Windows Terminal Remote Code Execution Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
整数溢出或超界折返
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows Terminal 数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows Terminal是美国Microsoft公司的Windows操作系统的一款现代化、高效且功能强大的终端应用程序。 Microsoft Windows Terminal存在数字错误漏洞，该漏洞源于整数溢出或环绕错误，可能导致未经授权的攻击者通过网络远程执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Windows Terminal App | - | - |
II. Public POCs for CVE-2026-59117
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-59117
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-59117 (1)
Same Patch Batch · Microsoft · 2026-07-16 · 20 CVEs total
| CVE-2026-57206 | 8.6 HIGH | SimpleChat plugin validation endpoints missing authentication and authorization |
| CVE-2026-53598 | 7.5 HIGH | Prompty: Arbitrary File Read via ${file:path} Reference Expansion |
| CVE-2026-59861 | 7.5 HIGH | Kiota: Code Generation Literal Injection in Kiota Ruby Generator |
| CVE-2026-59862 | 7.5 HIGH | Kiota: Code Generation Literal Injection in the Python Generator |
| CVE-2026-59867 | 7.1 HIGH | Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref |
| CVE-2026-58598 | 7.0 HIGH | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2026-55440 | 6.5 MEDIUM | Microsoft UFO: COMMAND_RESULTS handler creates unowned sessions, allowing authenticated se |
| CVE-2026-58643 | 6.1 MEDIUM | Windows Admin Center Spoofing Vulnerability |
| CVE-2026-62826 | 4.6 MEDIUM | Microsoft SharePoint Server Spoofing Vulnerability |
| CVE-2026-54568 | 4.3 MEDIUM | Microsoft UFO: Missing Authorization in DEVICE_INFO_REQUEST Allows a DEVICE Client to Read |
| CVE-2026-57205 | 4.3 MEDIUM | SimpleChat: Authenticated users can access other users' profile metadata through user IDOR |
| CVE-2026-59860 | Kiota: XML Doc-Comment Newline Breakout Code Injection | |
| CVE-2026-59859 | Kiota: Code Generation Literal Injection in the PHP Generator | |
| CVE-2026-59863 | Kiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRF | |
| CVE-2026-59865 | Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota i | |
| CVE-2026-59864 | Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions | |
| CVE-2026-59866 | Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clien | |
| CVE-2026-54733 | moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpoin | |
| CVE-2026-53597 | Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader |
IV. Related Vulnerabilities
Same vendor: Microsoft
- CVE-2026-56171
Windows Remote Desktop Protocol (RDP) Information Disclosure - CVE-2026-57980
Microsoft Edge (Chromium-based) Tampering Vulnerability - CVE-2026-62826
Microsoft SharePoint Server Spoofing Vulnerability - CVE-2026-58643
Windows Admin Center Spoofing Vulnerability - CVE-2026-58598
Windows Backup Service Elevation of Privilege Vulnerability
Same weakness: CWE-190
- CVE-2026-48354
CAI Content Credentials | Integer Overflow or Wraparound (CW - CVE-2026-48342
Bridge | Integer Overflow or Wraparound (CWE-190) - CVE-2026-58594
Remote Desktop Client Remote Code Execution Vulnerability - CVE-2026-58532
Windows Kernel Elevation of Privilege Vulnerability - CVE-2026-56647
Windows Remote Access Service Infrastructure Elevation of Pr
V. Comments for CVE-2026-59117
No comments yet