Vendors / Mintty Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now Mintty Project records in CISA KEV No Mintty Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01239 · Published 2023-10-26 · No fix listed CWE-96
Priority MEDIUM 51
Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01233 · Published 2023-10-19 · No fix listed CWE-74
Priority MEDIUM 42
Mintty Sixel Image Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0097 · Published 2025-02-11 · No fix listed CWE-122
Priority LOW 36
Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01637 · Published 2021-06-03 · No fix listed CWE-770
Priority LOW 35
Mintty before 3.4.7 mishandles Bracketed Paste Mode.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00912 · Published 2021-06-06 · No fix listed CWE-755
Open these records in search → All records by CVSS severity
2 3 0 0 0
THREATIST.IORead the docs