IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4762 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a… Affected: 12.4.3 |
| CVE-2016-4759 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 12.5.1 |
| CVE-2016-4728 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute… Affected: before 12.5.1 |
| CVE-2018-4269 | 8.6 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.8 |
| CVE-2020-9794 | 8.1 | Jun 9 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.10.7 |
| CVE-2018-4319 | 8.1 | Apr 3 | A cross-origin issue existed with "iframe" elements Affected: before 12.9 |
| CVE-2018-4311 | 8.1 | Apr 3 | The issue was addressed by removing origin information Affected: before 12.9 |
| CVE-2018-20506 | 8.1 | Apr 3 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after… Affected: through 12.9.3 |
| CVE-2024-44193 | 7.8 | Oct 2 | A logic issue was addressed with improved restrictions Affected: before 12.13.3 |
| CVE-2024-27793 | 7.8 | May 14 | The issue was addressed with improved checks Affected: before 12.13.2 |
| CVE-2022-48611 | 7.8 | Apr 26 | A logic issue was addressed with improved checks Affected: before 12.12.4 |
| CVE-2023-42938 | 7.8 | Mar 14 | A logic issue was addressed with improved checks Affected: before 12.13.1 |
| CVE-2023-32353 | 7.8 | Jun 23 | A logic issue was addressed with improved checks Affected: before 12.12.9 |
| CVE-2023-32351 | 7.8 | Jun 23 | A logic issue was addressed with improved checks Affected: before 12.12.9 |
| CVE-2022-26774 | 7.8 | May 26 | A logic issue was addressed with improved state management Affected: before 12.12.4 |
| CVE-2022-26751 | 7.8 | May 26 | A memory corruption issue was addressed with improved input validation Affected: before 12.12.4 |
| CVE-2022-22612 | 7.8 | Mar 18 | A memory consumption issue was addressed with improved memory handling Affected: before 12.12.3 |
| CVE-2022-22611 | 7.8 | Mar 18 | An out-of-bounds read was addressed with improved input validation Affected: before 12.12.3 |
| CVE-2018-4302 | 7.8 | Dec 23 | A null pointer dereference was addressed with improved validation Affected: before 12.7 |
| CVE-2021-30849 | 7.8 | Oct 19 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.12 |
| CVE-2021-30847 | 7.8 | Oct 19 | This issue was addressed with improved checks Affected: before 12.12 |
| CVE-2021-30835 | 7.8 | Oct 19 | This issue was addressed with improved checks Affected: before 12.12 |
| CVE-2020-27918 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 12.11 |
| CVE-2020-27917 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 12.11 |
| CVE-2020-27912 | 7.8 | Dec 8 | An out-of-bounds write was addressed with improved input validation Affected: before 12.11 |
| CVE-2020-27911 | 7.8 | Dec 8 | An integer overflow was addressed through improved input validation Affected: before 12.11 |
| CVE-2020-9999 | 7.8 | Dec 8 | A memory corruption issue was addressed with improved state management Affected: before 12.10.9 |
| CVE-2020-9981 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 12.10.9 |
| CVE-2020-9961 | 7.8 | Oct 27 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.9 |
| CVE-2020-3864 | 7.8 | Oct 27 | A logic issue was addressed with improved validation Affected: before 12.10.4 |
| CVE-2019-8848 | 7.8 | Oct 27 | This issue was addressed with improved checks Affected: before 12.10.3 |
| CVE-2020-9984 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.8 |
| CVE-2020-9938 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.8 |
| CVE-2020-9937 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9919 | 7.8 | Oct 22 | A buffer overflow issue was addressed with improved memory handling Affected: before 12.10.8 |
| CVE-2020-9883 | 7.8 | Oct 22 | A buffer overflow issue was addressed with improved memory handling Affected: before 12.10.8 |
| CVE-2020-9879 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9877 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9876 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.9 |
| CVE-2020-9875 | 7.8 | Oct 22 | An integer overflow was addressed through improved input validation Affected: before 12.10.8 |
| CVE-2020-9874 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9873 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.8 |
| CVE-2020-9872 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9871 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9936 | 7.8 | Oct 16 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9862 | 7.8 | Oct 16 | A command injection issue existed in Web Inspector Affected: before 12.10.8 |
| CVE-2020-3878 | 7.8 | Feb 27 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.7 |
| CVE-2020-3826 | 7.8 | Feb 27 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.4 |
| CVE-2019-8801 | 7.8 | Dec 18 | A dynamic library loading issue existed in iTunes setup Affected: before 12.10.2 |
| CVE-2019-8784 | 7.8 | Dec 18 | A memory corruption issue was addressed with improved memory handling Affected: before 12.10.2 |
The 500 most important CVEs for this product (exploited first, then by severity)