CVE-2021-47781 MEDIUM

CVE-2021-47781: Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)

Vendor Cmder
Product Cmder Console Emulator
Weakness CWE-787
Published January 15, 2026
Last update January 15, 2026
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Cmder Console Emulator 1.3.18 contains a buffer overflow vulnerability that allows attackers to trigger a denial of service condition through a maliciously crafted .cmd file. Attackers can create a specially constructed .cmd file with repeated characters to overwhelm the console emulator's buffer and crash the application.

Key dates

02Disclosure timeline

January 15, 2026 CVE published
January 15, 2026 Record updated