iTerm2 records
12 published records for vendor iterm2.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 8.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-116 Improper Encoding or Escaping of Output2
- CWE-117 Improper Output Neutralization for Logs2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data1
- CWE-532 Insertion of Sensitive Information into Log File1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-9535No exploit | iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command executioniterm2 · iterm2 · CWE-349 | Critical9.8 | — | 2.4% | Oct 9, 2019 |
40Plan | CVE-2024-38396Proof of concept | An issue was discovered in iTerm2 3.5.x before 3.5.2.iterm2 · iterm2 · CWE-94 | Critical9.8 | — | 1.6% | Jun 16, 2024 |
39Monitor | CVE-2024-38395No exploit | In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is noiterm2 · iterm2 · CWE-94 | Critical9.8 | — | 1.4% | Jun 15, 2024 |
39Monitor | CVE-2023-46300No exploit | iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integratioiterm2 · iterm2 · CWE-116 | Critical9.8 | — | 1.1% | Oct 22, 2023 |
39Monitor | CVE-2023-46301No exploit | iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload.iterm2 · iterm2 · CWE-116 | Critical9.8 | — | 1.1% | Oct 22, 2023 |
39Monitor | CVE-2022-45872No exploit | iTerm2 before 3.4.18 mishandles a DECRQSS response.iterm2 · iterm2 · CWE-20 | Critical9.8 | — | 0.9% | Nov 23, 2022 |
39Monitor | CVE-2023-46321No exploit | iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs.iterm2 · iterm2 · CWE-117 | Critical9.8 | — | 0.6% | Oct 22, 2023 |
39Monitor | CVE-2023-46322No exploit | iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs.iterm2 · iterm2 · CWE-117 | Critical9.8 | — | 0.6% | Oct 22, 2023 |
37Monitor | CVE-2025-22275No exploit | iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by readiniterm2 · iterm2 · CWE-532 | Critical9.3 | — | 0.4% | Jan 3, 2025 |
31Monitor | CVE-2015-9231No exploit | iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries.iterm2 · iterm2 · CWE-200 | High7.5 | — | 2.2% | Sep 20, 2017 |
31Monitor | CVE-2026-41253No exploit | In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains aiterm2 · iterm2 · CWE-829 | High7.8 | — | 0.1% | Apr 18, 2026 |
30Monitor | CVE-2019-19022No exploit | iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which miterm2 · iterm2 · CWE-200 | High7.5 | — | 1.4% | Nov 17, 2019 |
- CVE-2019-953540Plan
iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution
CriticalCVSS 9.8No exploitEPSS 2%iterm2 · iterm2Oct 9, 2019
- CVE-2024-3839640Plan
An issue was discovered in iTerm2 3.5.x before 3.5.2.
CriticalCVSS 9.8Proof of conceptEPSS 1%iterm2 · iterm2Jun 16, 2024
- CVE-2024-3839539Monitor
In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is no
CriticalCVSS 9.8No exploitEPSS 1%iterm2 · iterm2Jun 15, 2024
- CVE-2023-4630039Monitor
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integratio
CriticalCVSS 9.8No exploitEPSS 1%iterm2 · iterm2Oct 22, 2023
- CVE-2023-4630139Monitor
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload.
CriticalCVSS 9.8No exploitEPSS 1%iterm2 · iterm2Oct 22, 2023
- CVE-2022-4587239Monitor
iTerm2 before 3.4.18 mishandles a DECRQSS response.
CriticalCVSS 9.8No exploitEPSS 0%iterm2 · iterm2Nov 23, 2022
- CVE-2023-4632139Monitor
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs.
CriticalCVSS 9.8No exploitEPSS 0%iterm2 · iterm2Oct 22, 2023
- CVE-2023-4632239Monitor
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs.
CriticalCVSS 9.8No exploitEPSS 0%iterm2 · iterm2Oct 22, 2023
- CVE-2025-2227537Monitor
iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by readin
CriticalCVSS 9.3No exploitEPSS 0%iterm2 · iterm2Jan 3, 2025
- CVE-2015-923131Monitor
iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries.
HighCVSS 7.5No exploitEPSS 2%iterm2 · iterm2Sep 20, 2017
- CVE-2026-4125331Monitor
In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains a
HighCVSS 7.8No exploitEPSS 0%iterm2 · iterm2Apr 18, 2026
- CVE-2019-1902230Monitor
iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which m
HighCVSS 7.5No exploitEPSS 1%iterm2 · iterm2Nov 17, 2019