CVE-2023-39150

—

CVSS 3.1

9.8 critical

EPSS

<1%p54

Published

Sep 12, 2023 (Sep 12, 2023)

Modified

Jun 17, 2026

Description

ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387.

Vendors: maximus5
Products: conemu
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.