Cmder vulnerabilities
Published CVEs affecting Cmder products: 1 record(s), with severity, exploitation and fixes.
CVE-2021-47781
Critical · 9.8
CWE-787 Jan 15, 2026
Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)
Cmder Console Emulator 1.3.18 contains a buffer overflow vulnerability that allows attackers to trigger a denial of service condition through a maliciously crafted .cmd file. Attackers can create a specially constructed .cmd file with repeated characters to overwhelm the console emulator's buffer and crash the application.