https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-1142.htmlhttps://patchthecve.com/cve/CVE-2008-1142.htmlTue, 16 Jun 2026 22:51:04 +0000LOW 3.7: rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that thehttps://patchthecve.com/cve/CVE-2003-0066.htmlhttps://patchthecve.com/cve/CVE-2003-0066.htmlTue, 16 Jun 2026 22:01:27 +0000HIGH 7.5: The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to exhttps://patchthecve.com/cve/CVE-2003-0023.htmlhttps://patchthecve.com/cve/CVE-2003-0023.htmlTue, 16 Jun 2026 22:01:21 +0000MEDIUM 5.0: The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu.https://patchthecve.com/cve/CVE-2003-0022.htmlhttps://patchthecve.com/cve/CVE-2003-0022.htmlTue, 16 Jun 2026 22:01:21 +0000MEDIUM 5.0: The "screen dump" feature in rxvt 2.7.8 allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence.https://patchthecve.com/cve/CVE-2001-1077.htmlhttps://patchthecve.com/cve/CVE-2001-1077.htmlTue, 16 Jun 2026 21:55:32 +0000MEDIUM 4.6: Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.https://patchthecve.com/cve/CVE-2000-0476.htmlhttps://patchthecve.com/cve/CVE-2000-0476.htmlTue, 16 Jun 2026 21:51:48 +0000MEDIUM 5.0: xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.