IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4763 | 6.8 | Sep 25 | WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows… Affected: through 12.4.3 |
| CVE-2021-1857 | 6.5 | Sep 8 | A memory initialization issue was addressed with improved memory handling Affected: before 12.11.3 |
| CVE-2021-1811 | 6.5 | Sep 8 | A logic issue was addressed with improved state management Affected: before 12.11.3 |
| CVE-2020-9849 | 6.5 | Dec 8 | An information disclosure issue was addressed with improved state management Affected: 12.0.0 before 12.10.9 |
| CVE-2019-8570 | 6.5 | Oct 27 | A logic issue was addressed with improved state management Affected: before 12.9.3 |
| CVE-2018-4444 | 6.5 | Oct 27 | A logic issue was addressed with improved state management Affected: before 12.9.2 |
| CVE-2020-9915 | 6.5 | Oct 16 | An access issue existed in Content Security Policy Affected: before 12.10.8 |
| CVE-2020-3862 | 6.5 | Feb 27 | A denial of service issue was addressed with improved memory handling Affected: before 12.10.4 |
| CVE-2019-8615 | 6.5 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2019-8607 | 6.5 | Dec 18 | An out-of-bounds read was addressed with improved input validation Affected: before 12.9.5 |
| CVE-2019-8597 | 6.5 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2019-8515 | 6.5 | Dec 18 | A cross-origin issue existed with the fetch API Affected: before 12.9.4 |
| CVE-2019-7292 | 6.5 | Dec 18 | A validation issue was addressed with improved logic Affected: before 12.9.4 |
| CVE-2018-4439 | 6.5 | Apr 3 | A logic issue was addressed with improved validation Affected: before 12.9.2 |
| CVE-2018-4409 | 6.5 | Apr 3 | A resource exhaustion issue was addressed with improved input validation Affected: before 12.9.1 |
| CVE-2018-4273 | 6.5 | Apr 3 | Multiple memory corruption issues were addressed with improved input validation Affected: before 12.8 |
| CVE-2018-4271 | 6.5 | Apr 3 | Multiple memory corruption issues were addressed with improved input validation Affected: before 12.8 |
| CVE-2018-4270 | 6.5 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 12.8 |
| CVE-2018-4188 | 6.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2018-4146 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2018-4117 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2018-4113 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2017-2480 | 6.5 | Apr 2 | An issue was discovered in certain Apple products Affected: through 12.5.5.5 |
| CVE-2017-2479 | 6.5 | Apr 2 | An issue was discovered in certain Apple products Affected: before 12.6 |
| CVE-2016-7599 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7598 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7586 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-4613 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.1 |
| CVE-2016-4760 | 6.5 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by… Affected: through 12.4.3 |
| CVE-2016-4758 | 6.5 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to… Affected: through 12.4.3 |
| CVE-2010-2249 | 6.5 | Jun 30 | Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a… Affected: before 10.2 |
| CVE-2019-8608 | 6.3 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2021-1825 | 6.1 | Sep 8 | An input validation issue was addressed with improved input validation Affected: before 12.11.3 |
| CVE-2019-8762 | 6.1 | Oct 27 | A validation issue was addressed with improved logic Affected: before 12.10.1 |
| CVE-2020-9925 | 6.1 | Oct 16 | A logic issue was addressed with improved state management Affected: before 12.10.8 |
| CVE-2020-3902 | 6.1 | Apr 1 | An input validation issue was addressed with improved input validation Affected: before 12.10.5 |
| CVE-2020-3867 | 6.1 | Feb 27 | A logic issue was addressed with improved state management Affected: before 12.10.4 |
| CVE-2019-8813 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.10.2 |
| CVE-2019-8719 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.10.1 |
| CVE-2019-8690 | 6.1 | Dec 18 | A logic issue existed in the handling of document loads Affected: before 12.9.6 |
| CVE-2019-8658 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.9.6 |
| CVE-2019-8649 | 6.1 | Dec 18 | A logic issue existed in the handling of synchronous page loads Affected: before 12.9.6 |
| CVE-2019-8625 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.10.1 |
| CVE-2019-8551 | 6.1 | Dec 18 | A logic issue was addressed with improved validation Affected: before 12.9.4 |
| CVE-2018-4377 | 6.1 | Apr 3 | A cross-site scripting issue existed in Safari Affected: before 12.9.1 |
| CVE-2018-4374 | 6.1 | Apr 3 | A logic issue was addressed with improved validation Affected: before 12.9.1 |
| CVE-2018-4345 | 6.1 | Apr 3 | A cross-site scripting issue existed in Safari Affected: before 12.9 |
| CVE-2018-4309 | 6.1 | Apr 3 | A cross-site scripting issue existed in Safari Affected: before 12.9 |
| CVE-2019-6229 | 6.1 | Mar 5 | A logic issue was addressed with improved validation Affected: before 12.9.3 |
| CVE-2017-7153 | 6.1 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.2 |
The 500 most important CVEs for this product (exploited first, then by severity)