CVE-2021-47972
Sticky Notes & Color Widgets 1.4.2 Denial of Service
- State
- Published
- Severity
- 8.7 High
- Published
- May 16, 2026
- Updated
- May 18, 2026
- Reserved
- May 16, 2026
Description
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | VulnCheck |
Weaknesses
- CWE-789 Memory Allocation with Excessive Size Value
Affected Products
| Product | Versions |
|---|---|
Sticky Notes Color Widgetssticky-notes-color-widgets |
|
References
- ExploitDB-49957exploit
- VulnCheck Advisory: Sticky Notes & Color Widgets 1.4.2 Denial of Servicethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.