IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8602 | 7.8 | Dec 18 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 12.9.5 |
| CVE-2019-8577 | 7.8 | Dec 18 | An input validation issue was addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2019-8542 | 7.8 | Dec 18 | A buffer overflow was addressed with improved bounds checking Affected: before 12.9.4 |
| CVE-2018-4414 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.9 |
| CVE-2018-4412 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.9 |
| CVE-2018-4394 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 12.9.1 |
| CVE-2018-4347 | 7.8 | Apr 3 | A use after free issue was addressed with improved memory management Affected: before 12.9 |
| CVE-2018-4126 | 7.8 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 12.9 |
| CVE-2019-6221 | 7.8 | Mar 5 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.9.3 |
| CVE-2018-4144 | 7.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2017-7172 | 7.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.2 |
| CVE-2017-7053 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7025 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7024 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7023 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7022 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7013 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2017-7010 | 7.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 12.6.1 |
| CVE-2016-1742 | 7.8 | May 20 | Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory Affected: through 12.3.1 |
| CVE-2010-3190 | 7.8 | Aug 31 | Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual… Affected: 12.1.3 |
| CVE-2018-4474 | 7.5 | Oct 27 | A memory consumption issue was addressed with improved memory handling Affected: before 12.9 |
| CVE-2019-8741 | 7.5 | Feb 28 | A denial of service issue was addressed with improved input validation Affected: before 12.10.1 |
| CVE-2018-4398 | 7.5 | Apr 3 | An issue existed in the method for determining prime numbers Affected: before 12.9.1 |
| CVE-2018-20505 | 7.5 | Apr 3 | SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to… Affected: before 12.9.3 |
| CVE-2018-4192 | 7.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2017-7090 | 7.5 | Oct 23 | An issue was discovered in certain Apple products Affected: through 12.6.2 |
| CVE-2016-4447 | 7.5 | Jun 9 | The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application… Affected: 12.4.1 |
| CVE-2020-36521 | 7.1 | Sep 23 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.9 |
| CVE-2022-26773 | 7.1 | May 26 | A logic issue was addressed with improved state management Affected: before 12.12.4 |
| CVE-2020-9843 | 7.1 | Jun 9 | An input validation issue was addressed with improved input validation Affected: before 12.10.7 |
| CVE-2020-9805 | 7.1 | Jun 9 | A logic issue was addressed with improved restrictions Affected: before 12.10.7 |
| CVE-2020-3861 | 7.1 | Feb 27 | The issue was addressed with improved permissions logic Affected: before 12.10.4 |
| CVE-2016-4743 | 7.1 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2020-13630 | 7.0 | May 27 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature Affected: before 12.10.9 |
| CVE-2017-7151 | 7.0 | Apr 3 | A race condition was addressed with additional validation Affected: before 12.7.2 |
| CVE-2016-4763 | 6.8 | Sep 25 | WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows… Affected: through 12.4.3 |
| CVE-2021-1857 | 6.5 | Sep 8 | A memory initialization issue was addressed with improved memory handling Affected: before 12.11.3 |
| CVE-2021-1811 | 6.5 | Sep 8 | A logic issue was addressed with improved state management Affected: before 12.11.3 |
| CVE-2020-9849 | 6.5 | Dec 8 | An information disclosure issue was addressed with improved state management Affected: 12.0.0 before 12.10.9 |
| CVE-2019-8570 | 6.5 | Oct 27 | A logic issue was addressed with improved state management Affected: before 12.9.3 |
| CVE-2018-4444 | 6.5 | Oct 27 | A logic issue was addressed with improved state management Affected: before 12.9.2 |
| CVE-2020-9915 | 6.5 | Oct 16 | An access issue existed in Content Security Policy Affected: before 12.10.8 |
| CVE-2020-3862 | 6.5 | Feb 27 | A denial of service issue was addressed with improved memory handling Affected: before 12.10.4 |
| CVE-2019-8615 | 6.5 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2019-8607 | 6.5 | Dec 18 | An out-of-bounds read was addressed with improved input validation Affected: before 12.9.5 |
| CVE-2019-8597 | 6.5 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2019-8515 | 6.5 | Dec 18 | A cross-origin issue existed with the fetch API Affected: before 12.9.4 |
| CVE-2019-7292 | 6.5 | Dec 18 | A validation issue was addressed with improved logic Affected: before 12.9.4 |
| CVE-2018-4439 | 6.5 | Apr 3 | A logic issue was addressed with improved validation Affected: before 12.9.2 |
| CVE-2018-4409 | 6.5 | Apr 3 | A resource exhaustion issue was addressed with improved input validation Affected: before 12.9.1 |
The 500 most important CVEs for this product (exploited first, then by severity)