IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7109 | 6.1 | Oct 23 | An issue was discovered in certain Apple products Affected: through 12.6.2 |
| CVE-2017-7089 | 6.1 | Oct 23 | An issue was discovered in certain Apple products Affected: through 12.6.2 |
| CVE-2018-4266 | 5.9 | Apr 3 | A race condition was addressed with additional validation Affected: before 12.8 |
| CVE-2017-13864 | 5.9 | Dec 25 | An issue was discovered in certain Apple products Affected: before 12.7.2 |
| CVE-2024-44157 | 5.5 | Oct 11 | A stack buffer overflow was addressed through improved input validation Affected: before 12.13.3 |
| CVE-2020-7463 | 5.5 | Mar 26 | In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel… Affected: before 12.11.3 |
| CVE-2020-10002 | 5.5 | Dec 8 | A logic issue was addressed with improved state management Affected: before 12.11 |
| CVE-2019-8582 | 5.5 | Oct 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.9.5 |
| CVE-2020-13631 | 5.5 | May 27 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c Affected: before 12.10.9 |
| CVE-2020-13434 | 5.5 | May 24 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c Affected: before 12.10.9 |
| CVE-2020-11765 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11764 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11763 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11762 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11761 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11760 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11759 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11758 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2019-8598 | 5.5 | Dec 18 | An input validation issue was addressed with improved input validation Affected: before 12.9.5 |
| CVE-2018-4226 | 5.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2018-4225 | 5.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2018-4224 | 5.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2017-7079 | 5.5 | Oct 23 | An issue was discovered in certain Apple products Affected: through 12.6.2 |
| CVE-2017-7064 | 5.5 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2020-9916 | 5.3 | Oct 16 | A URL Unicode encoding issue was addressed with improved state management Affected: before 12.10.8 |
| CVE-2019-13118 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: before 12.9.6 |
| CVE-2018-4293 | 5.3 | Apr 3 | A cookie management issue was addressed with improved checks Affected: before 12.8 |
| CVE-2019-8898 | 4.3 | Oct 27 | An information disclosure issue existed in the handling of the Storage Access API Affected: before 12.10.3 |
| CVE-2019-8834 | 4.3 | Oct 27 | A configuration issue was addressed with additional restrictions Affected: before 12.10.3 |
| CVE-2019-8827 | 4.3 | Oct 27 | The HTTP referrer header may be used to leak browsing history Affected: before 12.10.2 |
| CVE-2020-9894 | 4.3 | Oct 16 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.8 |
| CVE-2020-3887 | 4.3 | Apr 1 | A logic issue was addressed with improved restrictions Affected: before 12.10.5 |
| CVE-2020-3885 | 4.3 | Apr 1 | A logic issue was addressed with improved restrictions Affected: before 12.10.5 |
| CVE-2018-4440 | 4.3 | Apr 3 | A logic issue was addressed with improved state management Affected: before 12.9.2 |
| CVE-2018-4278 | 4.3 | Jan 11 | In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be… Affected: before 12.8 |
| CVE-2018-4232 | 4.3 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2016-7592 | 4.3 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
The 500 most important CVEs for this product (exploited first, then by severity)