IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-27918 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 12.11 |
| CVE-2020-27917 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 12.11 |
| CVE-2020-27912 | 7.8 | Dec 8 | An out-of-bounds write was addressed with improved input validation Affected: before 12.11 |
| CVE-2020-27911 | 7.8 | Dec 8 | An integer overflow was addressed through improved input validation Affected: before 12.11 |
| CVE-2020-9999 | 7.8 | Dec 8 | A memory corruption issue was addressed with improved state management Affected: before 12.10.9 |
| CVE-2020-9981 | 7.8 | Dec 8 | A use after free issue was addressed with improved memory management Affected: before 12.10.9 |
| CVE-2020-9961 | 7.8 | Oct 27 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.9 |
| CVE-2020-3864 | 7.8 | Oct 27 | A logic issue was addressed with improved validation Affected: before 12.10.4 |
| CVE-2019-8848 | 7.8 | Oct 27 | This issue was addressed with improved checks Affected: before 12.10.3 |
| CVE-2020-9984 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.8 |
| CVE-2020-9938 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.8 |
| CVE-2020-9937 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9919 | 7.8 | Oct 22 | A buffer overflow issue was addressed with improved memory handling Affected: before 12.10.8 |
| CVE-2020-9883 | 7.8 | Oct 22 | A buffer overflow issue was addressed with improved memory handling Affected: before 12.10.8 |
| CVE-2020-9879 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9877 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9876 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.9 |
| CVE-2020-9875 | 7.8 | Oct 22 | An integer overflow was addressed through improved input validation Affected: before 12.10.8 |
| CVE-2020-9874 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9873 | 7.8 | Oct 22 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.8 |
| CVE-2020-9872 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9871 | 7.8 | Oct 22 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9936 | 7.8 | Oct 16 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 12.10.8 |
| CVE-2020-9862 | 7.8 | Oct 16 | A command injection issue existed in Web Inspector Affected: before 12.10.8 |
| CVE-2020-3878 | 7.8 | Feb 27 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.7 |
| CVE-2020-3826 | 7.8 | Feb 27 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.4 |
| CVE-2019-8801 | 7.8 | Dec 18 | A dynamic library loading issue existed in iTunes setup Affected: before 12.10.2 |
| CVE-2019-8784 | 7.8 | Dec 18 | A memory corruption issue was addressed with improved memory handling Affected: before 12.10.2 |
| CVE-2019-8602 | 7.8 | Dec 18 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 12.9.5 |
| CVE-2019-8577 | 7.8 | Dec 18 | An input validation issue was addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2019-8542 | 7.8 | Dec 18 | A buffer overflow was addressed with improved bounds checking Affected: before 12.9.4 |
| CVE-2018-4414 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.9 |
| CVE-2018-4412 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.9 |
| CVE-2018-4394 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.9.1 |
| CVE-2018-4347 | 7.8 | Apr 3 | A use after free issue was addressed with improved memory management Affected: before 12.9 |
| CVE-2018-4126 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 12.9 |
| CVE-2019-6221 | 7.8 | Mar 5 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.9.3 |
| CVE-2018-4144 | 7.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2017-7172 | 7.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.2 |
| CVE-2017-7053 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7025 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7024 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7023 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7022 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7013 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7010 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2016-1742 | 7.8 | May 20 | Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory Affected: through 12.3.1 |
| CVE-2010-3190 | 7.8 | Aug 31 | Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual… Affected: 12.1.3 |
| CVE-2018-4474 | 7.5 | Oct 27 | A memory consumption issue was addressed with improved memory handling Affected: before 12.9 |
| CVE-2019-8741 | 7.5 | Feb 28 | A denial of service issue was addressed with improved input validation Affected: before 12.10.1 |
The 500 most important CVEs for this product (exploited first, then by severity)