CVE-2022-45872: ITERM2

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

iTerm2 before 3.4.18 mishandles a DECRQSS response.

Affected products

• ITERM2 ITERM2: before 3.4.18 (fixed in 3.4.18)

Published 2022-11-23. Last modified 2026-06-17.