CVE-2023-39150

9.8 criticalEPSS 0.9%

Critical (9.8) in maximus5 conemu. EPSS 0.9% chance of exploitation in the next 30 days.

ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
Published: 2023-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

maximus5:conemu

References

https://gist.github.com/dgl/081cf503dc635df39d844e058a6d4c88
https://github.com/Maximus5/ConEmu/commit/60683a186628ffaa7689fcb64b3c38ced69287c1
https://gist.github.com/dgl/081cf503dc635df39d844e058a6d4c88
https://github.com/Maximus5/ConEmu/commit/60683a186628ffaa7689fcb64b3c38ced69287c1

Check your stack JSON