Advisories · Technology
iTerm2.
Every CVE that names iTerm2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Argument injection in iTerm2
- iTerm2
- Command injection
- CVSS 6.9 Medium
iTerm2: In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p…
- iTerm2
- CWE-829
- CVSS 9.3 CriticalCritical · CVSS 9+
Sensitive information in log files in iTerm2
- iTerm2
- Information disclosure
-
iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution
- iTerm2
- CWE-349