IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8506 In wildKEV | 8.8 | Dec 18 | Apple Multiple Products Type Confusion Vulnerability Affected: before 12.9.4 |
| CVE-2020-27932 In wildKEV | 7.8 | Dec 8 | Apple Multiple Products Type Confusion Vulnerability Affected: before 12.11 |
| CVE-2019-6235 | 10.0 | Mar 4 | A memory corruption issue was addressed with improved validation Affected: before 12.9.3 |
| CVE-2022-26711 | 9.8 | May 26 | An integer overflow issue was addressed with improved input validation Affected: before 12.12.4 |
| CVE-2019-8756 | 9.8 | Oct 27 | Multiple memory corruption issues were addressed with improved input validation Affected: before 12.10.1 |
| CVE-2019-8749 | 9.8 | Oct 27 | Multiple memory corruption issues were addressed with improved input validation Affected: before 12.10.1 |
| CVE-2019-8746 | 9.8 | Oct 27 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.1 |
| CVE-2020-9895 | 9.8 | Oct 16 | A use after free issue was addressed with improved memory management Affected: before 12.10.8 |
| CVE-2020-9850 | 9.8 | Jun 9 | A logic issue was addressed with improved restrictions Affected: before 12.10.7 |
| CVE-2020-3911 | 9.8 | Apr 1 | A buffer overflow was addressed with improved bounds checking Affected: before 12.10.5 |
| CVE-2020-3910 | 9.8 | Apr 1 | A buffer overflow was addressed with improved size validation Affected: before 12.10.5 |
| CVE-2020-3909 | 9.8 | Apr 1 | A buffer overflow was addressed with improved bounds checking Affected: before 12.10.5 |
| CVE-2019-8600 | 9.8 | Dec 18 | A memory corruption issue was addressed with improved input validation Affected: before 12.9.5 |
| CVE-2018-4147 | 9.8 | Jan 11 | In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption issues exist and were addressed with… Affected: before 12.7.3 |
| CVE-2016-4616 | 9.8 | Jul 22 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 12.4.2 |
| CVE-2016-4615 | 9.8 | Jul 22 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 12.4.2 |
| CVE-2016-4614 | 9.8 | Jul 22 | libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 12.4.2 |
| CVE-2016-4610 | 9.8 | Jul 22 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 12.4.2 |
| CVE-2016-4609 | 9.8 | Jul 22 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 12.4.2 |
| CVE-2016-4608 | 9.8 | Jul 22 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 12.4.2 |
| CVE-2016-4607 | 9.8 | Jul 22 | libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote… Affected: before 12.4.2 |
| CVE-2016-4448 | 9.8 | Jun 9 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors Affected: through 12.4.1 |
| CVE-2010-1205 | 9.8 | Jun 30 | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: before 10.2 |
| CVE-2019-8562 | 9.6 | Dec 18 | A memory corruption issue was addressed with improved validation Affected: before 12.9.4 |
| CVE-2022-26717 | 8.8 | Nov 1 | A use after free issue was addressed with improved memory management Affected: before 12.12.4 |
| CVE-2022-22629 | 8.8 | Sep 23 | A buffer overflow issue was addressed with improved memory handling Affected: before 12.12.3 |
| CVE-2020-9947 | 8.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: 12.0.0 before 12.10.9 |
| CVE-2019-8846 | 8.8 | Oct 27 | A use after free issue was addressed with improved memory management Affected: before 12.10.3 |
| CVE-2019-8844 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.10.3 |
| CVE-2019-8835 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.10.3 |
| CVE-2019-8825 | 8.8 | Oct 27 | A memory corruption issue was addressed with improved state management Affected: before 12.10.1 |
| CVE-2019-8773 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.10.1 |
| CVE-2019-8752 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.10.1 |
| CVE-2019-8751 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.10.1 |
| CVE-2019-8734 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.10.1 |
| CVE-2019-8728 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.10.1 |
| CVE-2019-8639 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.4 |
| CVE-2019-8638 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.4 |
| CVE-2020-9983 | 8.8 | Oct 16 | An out-of-bounds write issue was addressed with improved bounds checking Affected: 12.10.9 |
| CVE-2020-9951 | 8.8 | Oct 16 | A use after free issue was addressed with improved memory management Affected: before 12.10.9 |
| CVE-2020-9910 | 8.8 | Oct 16 | Multiple issues were addressed with improved logic Affected: before 12.10.8 |
| CVE-2020-9893 | 8.8 | Oct 16 | A use after free issue was addressed with improved memory management Affected: before 12.10.8 |
| CVE-2020-9807 | 8.8 | Jun 9 | A memory corruption issue was addressed with improved state management Affected: before 12.10.7 |
| CVE-2020-9806 | 8.8 | Jun 9 | A memory corruption issue was addressed with improved state management Affected: before 12.10.7 |
| CVE-2020-9803 | 8.8 | Jun 9 | A memory corruption issue was addressed with improved validation Affected: before 12.10.7 |
| CVE-2020-9802 | 8.8 | Jun 9 | A logic issue was addressed with improved restrictions Affected: before 12.10.7 |
| CVE-2020-9800 | 8.8 | Jun 9 | A type confusion issue was addressed with improved memory handling Affected: before 12.10.7 |
| CVE-2020-9790 | 8.8 | Jun 9 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.7 |
| CVE-2020-9789 | 8.8 | Jun 9 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.7 |
| CVE-2020-9783 | 8.8 | Apr 1 | A use after free issue was addressed with improved memory management Affected: before 12.10.5 |
The 500 most important CVEs for this product (exploited first, then by severity)