GCVE-110-CERTCC-2019-763073

Advisory PublishedCVSS 9.3/10

Vulnetix · Advisory published October 9, 2019

iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.3/10

Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_direct_report0

certcc-cvss-temporal-env

temporal_score7.3remediation_levelOFreport_confidenceCenvironmental_score1.82677257504target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2019-9535

References

iTerm2 with tmux integration is vulnerable to remote command execution

url

iTerm2 with tmux integration is vulnerable to remote command execution

url

iTerm2 with tmux integration is vulnerable to remote command execution

url

iTerm2 with tmux integration is vulnerable to remote command execution

url

iTerm2 with tmux integration is vulnerable to remote command execution

url

iTerm2 with tmux integration is vulnerable to remote command execution

advisory

iTerm2 with tmux integration is vulnerable to remote command execution

fix

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON