PatchTheCVEconemu vulnerabilities and fixes
Recent CVEs affecting conemu, with upgrade or downgrade steps. 2 tracked.
conemu has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-09-12. Highest priority: CVE-2023-39150 (score 54/100).
- CVE-2023-39150 CRITICAL 9.8 UPGRADE ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially le
- CVE-2022-46387 CRITICAL 9.8 UPGRADE UPGRADE ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters,
FAQ
How do I fix conemu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is conemu being exploited right now?
None of the tracked conemu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which conemu CVE should I patch first?
CVE-2023-39150 currently ranks highest (54/100): ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially le.