IT
Product
Itunes
On CISA KEVExploited in the wild
922
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 22High 363Medium 87Low 3
Watch
Add Itunes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-4273 | 6.5 | Apr 3 | Multiple memory corruption issues were addressed with improved input validation Affected: before 12.8 |
| CVE-2018-4271 | 6.5 | Apr 3 | Multiple memory corruption issues were addressed with improved input validation Affected: before 12.8 |
| CVE-2018-4270 | 6.5 | Apr 3 | A memory corruption issue was addressed with improved memory handling Affected: before 12.8 |
| CVE-2018-4188 | 6.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 12.7.5 |
| CVE-2018-4146 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2018-4117 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2018-4113 | 6.5 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.4 |
| CVE-2017-2480 | 6.5 | Apr 2 | An issue was discovered in certain Apple products Affected: through 12.5.5.5 |
| CVE-2017-2479 | 6.5 | Apr 2 | An issue was discovered in certain Apple products Affected: before 12.6 |
| CVE-2016-7599 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7598 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-7586 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.3 |
| CVE-2016-4613 | 6.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 12.5.1 |
| CVE-2016-4760 | 6.5 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by… Affected: through 12.4.3 |
| CVE-2016-4758 | 6.5 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to… Affected: through 12.4.3 |
| CVE-2010-2249 | 6.5 | Jun 30 | Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a… Affected: before 10.2 |
| CVE-2019-8608 | 6.3 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 12.9.5 |
| CVE-2021-1825 | 6.1 | Sep 8 | An input validation issue was addressed with improved input validation Affected: before 12.11.3 |
| CVE-2019-8762 | 6.1 | Oct 27 | A validation issue was addressed with improved logic Affected: before 12.10.1 |
| CVE-2020-9925 | 6.1 | Oct 16 | A logic issue was addressed with improved state management Affected: before 12.10.8 |
| CVE-2020-3902 | 6.1 | Apr 1 | An input validation issue was addressed with improved input validation Affected: before 12.10.5 |
| CVE-2020-3867 | 6.1 | Feb 27 | A logic issue was addressed with improved state management Affected: before 12.10.4 |
| CVE-2019-8813 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.10.2 |
| CVE-2019-8719 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.10.1 |
| CVE-2019-8690 | 6.1 | Dec 18 | A logic issue existed in the handling of document loads Affected: before 12.9.6 |
| CVE-2019-8658 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.9.6 |
| CVE-2019-8649 | 6.1 | Dec 18 | A logic issue existed in the handling of synchronous page loads Affected: before 12.9.6 |
| CVE-2019-8625 | 6.1 | Dec 18 | A logic issue was addressed with improved state management Affected: before 12.10.1 |
| CVE-2019-8551 | 6.1 | Dec 18 | A logic issue was addressed with improved validation Affected: before 12.9.4 |
| CVE-2018-4377 | 6.1 | Apr 3 | A cross-site scripting issue existed in Safari Affected: before 12.9.1 |
| CVE-2018-4374 | 6.1 | Apr 3 | A logic issue was addressed with improved validation Affected: before 12.9.1 |
| CVE-2018-4345 | 6.1 | Apr 3 | A cross-site scripting issue existed in Safari Affected: before 12.9 |
| CVE-2018-4309 | 6.1 | Apr 3 | A cross-site scripting issue existed in Safari Affected: before 12.9 |
| CVE-2019-6229 | 6.1 | Mar 5 | A logic issue was addressed with improved validation Affected: before 12.9.3 |
| CVE-2017-7153 | 6.1 | Apr 3 | An issue was discovered in certain Apple products Affected: before 12.7.2 |
| CVE-2017-7109 | 6.1 | Oct 23 | An issue was discovered in certain Apple products Affected: through 12.6.2 |
| CVE-2017-7089 | 6.1 | Oct 23 | An issue was discovered in certain Apple products Affected: through 12.6.2 |
| CVE-2018-4266 | 5.9 | Apr 3 | A race condition was addressed with additional validation Affected: before 12.8 |
| CVE-2017-13864 | 5.9 | Dec 25 | An issue was discovered in certain Apple products Affected: before 12.7.2 |
| CVE-2024-44157 | 5.5 | Oct 11 | A stack buffer overflow was addressed through improved input validation Affected: before 12.13.3 |
| CVE-2020-7463 | 5.5 | Mar 26 | In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel… Affected: before 12.11.3 |
| CVE-2020-10002 | 5.5 | Dec 8 | A logic issue was addressed with improved state management Affected: before 12.11 |
| CVE-2019-8582 | 5.5 | Oct 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 12.9.5 |
| CVE-2020-13631 | 5.5 | May 27 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c Affected: before 12.10.9 |
| CVE-2020-13434 | 5.5 | May 24 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c Affected: before 12.10.9 |
| CVE-2020-11765 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11764 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11763 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11762 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
| CVE-2020-11761 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 12.10.8 |
The 500 most important CVEs for this product (exploited first, then by severity)