CVE-2021-47972

Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.

CVSS v4.0

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.28% chance of exploitation in the next 30 days, 21th percentile

Published

2026-05-16

Updated

2026-05-18

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/49957

References

• CVE Record
• NVD entry

Related

• CVE-2021-47971
• CVE-2021-47973
• CVE-2021-47970
• CVE-2021-47974
• CVE-2021-47969
• CVE-2021-47975