CVE-2024-38395

—

CVSS 3.1

9.8 critical

EPSS

1%p73

Published

Jun 16, 2024 (Jun 16, 2024)

Modified

Jun 17, 2026

Description

In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."

Vendors: iterm2
Products: iterm2
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.