CVE-2021-35448

Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections.

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.04% chance of exploitation in the next 30 days, 64th percentile

Published

2021-06-24

Updated

2024-08-04

Proof-of-concept exploits (1)

• Goultarde/RemoteMouse-3.008-RCE0★ · 2026-07-14

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/50047

Security advisories

• https://deathflash.ml/blog/remote-mouse-lpe
• https://leobreaker1411.github.io/blog/cve-2021-35448

References

• CVE Record
• NVD entry

Related

• CVE-2022-42889
• CVE-2024-46987
• CVE-2025-6018
• CVE-2025-6019
• CVE-2026-27944