CVE-2023-46300

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p66

Published

Oct 22, 2023 (Oct 22, 2023)

Modified

Jun 17, 2026

Description

iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration.

Vendors: iterm2
Products: iterm2
Weakness: CWE-116
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.