IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2356 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 12.5.5 |
| CVE-2017-2355 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 12.5.5 |
| CVE-2017-2354 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 12.5.5 |
| CVE-2016-7656 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7654 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7652 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7649 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7648 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7646 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7645 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7642 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7641 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7640 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7639 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7635 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7632 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7611 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7610 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7589 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7587 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: 12.5.3 |
| CVE-2016-7578 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 12.5.2 |
| CVE-2016-4764 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5 |
| CVE-2016-4692 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-4769 | 8.8 | Sep 25 | WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Affected: through 12.4.3 |
| CVE-2016-4768 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 12.5.1 |
| CVE-2016-4767 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 12.5.1 |
| CVE-2016-4766 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 12.5.1 |
| CVE-2016-4765 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 12.5.1 |
| CVE-2016-4762 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a… Affected: 12.4.3 |
| CVE-2016-4759 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 12.5.1 |
| CVE-2016-4728 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute… Affected: before 12.5.1 |
| CVE-2018-4269 | 8.6 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.8 |
| CVE-2020-9794 | 8.1 | Jun 9 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.10.7 |
| CVE-2018-4319 | 8.1 | Apr 3 | A cross-origin issue existed with "iframe" elements Affected: before 12.9 |
| CVE-2018-4311 | 8.1 | Apr 3 | The issue was addressed by removing origin information Affected: before 12.9 |
| CVE-2018-20506 | 8.1 | Apr 3 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after… Affected: through 12.9.3 |
| CVE-2024-44193 | 7.8 | Oct 2 | A logic issue was addressed with improved restrictions Affected: before 12.13.3 |
| CVE-2024-27793 | 7.8 | May 8 | The issue was addressed with improved checks Affected: before 12.13.2 |
| CVE-2022-48611 | 7.8 | Apr 26 | A logic issue was addressed with improved checks Affected: before 12.12.4 |
| CVE-2023-42938 | 7.8 | Mar 14 | A logic issue was addressed with improved checks Affected: before 12.13.1 |
| CVE-2023-32353 | 7.8 | Jun 23 | A logic issue was addressed with improved checks Affected: before 12.12.9 |
| CVE-2023-32351 | 7.8 | Jun 23 | A logic issue was addressed with improved checks Affected: before 12.12.9 |
| CVE-2022-26774 | 7.8 | May 26 | A logic issue was addressed with improved state management Affected: before 12.12.4 |
| CVE-2022-26751 | 7.8 | May 26 | A memory corruption issue was addressed with improved input validation Affected: before 12.12.4 |
| CVE-2022-22612 | 7.8 | Mar 18 | A memory consumption issue was addressed with improved memory handling Affected: before 12.12.3 |
| CVE-2022-22611 | 7.8 | Mar 18 | An out-of-bounds read was addressed with improved input validation Affected: before 12.12.3 |
| CVE-2018-4302 | 7.8 | Dec 23 | A null pointer dereference was addressed with improved validation Affected: before 12.7 |
| CVE-2021-30849 | 7.8 | Oct 19 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.12 |
| CVE-2021-30847 | 7.8 | Oct 19 | This issue was addressed with improved checks Affected: before 12.12 |
| CVE-2021-30835 | 7.8 | Oct 19 | This issue was addressed with improved checks Affected: before 12.12 |
The 500 most important CVEs for this product (exploited first, then by severity)