CVE-2021-47781: Cmder Console Emulator

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cmder Console Emulator 1.3.18 contains a buffer overflow vulnerability that allows attackers to trigger a denial of service condition through a maliciously crafted .cmd file. Attackers can create a specially constructed .cmd file with repeated characters to overwhelm the console emulator's buffer and crash the application.

Affected products

• Cmder Cmder Console Emulator: version 1.3.18 only

Published 2026-01-15. Last modified 2026-06-17.