CVE-2024-38395
CVE-2024-38395
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.8EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Jun 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In iTerm2 before 3.5.2, the "Terminal may report window title" setting is not honored, and thus remote code execution might occur but "is not trivially exploitable."
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →