Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-47781 EUVD-2026-2757GHSA-7wmq-973g-rwg4

Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)

Published Jan 15, 2026 · Updated Aug 14, 2026 · Assigned by VulnCheck

Description

Cmder Console Emulator 1.3.18 contains a buffer overflow vulnerability that allows attackers to trigger a denial of service condition through a maliciously crafted .cmd file. Attackers can create a specially constructed .cmd file with repeated characters to overwhelm the console emulator's buffer and crash the application.

Affected products

VendorProductAffectedFixed
Cmder Cmder Console Emulator 1.3.18 —

References