IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-4398 | 7.5 | Apr 3 | An issue existed in the method for determining prime numbers Affected: before 12.9.1 |
| CVE-2018-20505 | 7.5 | Apr 3 | SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to… Affected: before 12.9.3 |
| CVE-2018-4192 | 7.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2017-7090 | 7.5 | Oct 23 | An issue was discovered in certain Apple products Affected: through 12.6.2 |
| CVE-2016-4447 | 7.5 | Jun 9 | The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application… Affected: 12.4.1 |
| CVE-2020-36521 | 7.1 | Sep 23 | An out-of-bounds read was addressed with improved input validation Affected: before 12.10.9 |
| CVE-2022-26773 | 7.1 | May 26 | A logic issue was addressed with improved state management Affected: before 12.12.4 |
| CVE-2020-9843 | 7.1 | Jun 9 | An input validation issue was addressed with improved input validation Affected: before 12.10.7 |
| CVE-2020-9805 | 7.1 | Jun 9 | A logic issue was addressed with improved restrictions Affected: before 12.10.7 |
| CVE-2020-3861 | 7.1 | Feb 27 | The issue was addressed with improved permissions logic Affected: before 12.10.4 |
| CVE-2016-4743 | 7.1 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2020-13630 | 7.0 | May 27 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature Affected: before 12.10.9 |
| CVE-2017-7151 | 7.0 | Apr 3 | A race condition was addressed with additional validation Affected: before 12.7.2 |
The 500 most important CVEs for this product (exploited first, then by severity)