iTerm2 — Vulnerabilities & Security Advisories 3

iTerm2 serves as a terminal emulator for macOS, primarily used for command-line interface access and shell integration. Historically, it has been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and insecure handling of external data. While no major security incidents have been widely documented, the three CVEs on record highlight potential risks in its rendering engine and protocol handling. The application's extensive feature set, including scripting capabilities and session management, introduces multiple attack surfaces that require careful configuration to mitigate potential exploitation risks.