Known vulnerabilities in iTunes

Vendor: Apple Inc.
Software: iTunes
Software CPE: cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
Total vulnerabilities: 157
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iTunes iTunes is affected by 157 known vulnerabilities: 64 high, 52 medium, 41 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98444 - Stack-based buffer overflow
CVE-2024-44157
CWE-121 Low
No
No
12.13.3 14.10.2024 SB2024101434
SB2024092702
#VU97739 - Incorrect Default Permissions
CVE-2024-44193
CWE-276 Low
No
No
12.13.3 27.09.2024 SB2024092702
#VU89270 - Memory corruption
CVE-2024-27793
CWE-119 High
No
No
12.13.2 08.05.2024 SB2024050865
#VU87537 - Protection Mechanism Failure
CVE-2023-42938
CWE-693 Low
No
No
12.13.1.3 14.03.2024 SB2024031445
#VU82750 - Untrusted Search Path
CVE-2023-32430
CWE-426 Low
No
No
12.12.9 06.11.2023 SB2023110630
SB2023052339
#VU76452 - Permissions, Privileges, and Access Controls
CVE-2023-32351
CWE-264 Low
No
No
12.12.9 23.05.2023 SB2023052339
#VU76451 - Permissions, Privileges, and Access Controls
CVE-2023-32353
CWE-264 Low
Available
No
12.12.9 23.05.2023 SB2023052339
#VU63463 - Permissions, Privileges, and Access Controls
CVE-2022-26773
CWE-264 Low
No
No
12.12.4 19.05.2022 SB2022051917
#VU63462 - Improper input validation
CVE-2022-26774
CWE-20 Low
No
No
12.12.4 19.05.2022 SB2022051917
#VU63282 - Use After Free
CVE-2022-26717
CWE-416 High
Available
No
12.12.4 16.05.2022 SB2022051701
SB2022051704
SB2022051705
and 37 more
#VU63247 - Integer overflow
CVE-2022-26711
CWE-190 High
Available
No
12.12.4 16.05.2022 SB2022051701
SB2022051705
SB2022051706
and 2 more
#VU63235 - Improper input validation
CVE-2022-26751
CWE-20 High
No
No
12.12.4 16.05.2022 SB2022051701
SB2022051702
SB2022051703
and 2 more
#VU61337 - Heap-based Buffer Overflow
CVE-2022-22629
CWE-122 High
Available
No
12.12.3 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 33 more
#VU61333 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22662
CWE-200 Medium
No
No
12.12.3 14.03.2022 SB2022031433
SB2022031434
SB2022031435
and 35 more
#VU61309 - Heap-based Buffer Overflow
CVE-2022-22612
CWE-122 Low
No
No
12.12.3 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 2 more
#VU61308 - Out-of-bounds read
CVE-2022-22611
CWE-125 High
No
No
12.12.3 14.03.2022 SB2022031433
SB2022031436
SB2022031437
and 2 more
#VU56732 - Memory corruption
CVE-2021-30849
CWE-119 High
No
No
12.12 20.09.2021 SB2021092021
SB2021092022
SB2021092023
and 12 more
#VU56723 - Memory corruption
CVE-2021-30847
CWE-119 High
No
No
12.12 20.09.2021 SB2021092021
SB2021092023
SB2021092024
and 3 more
#VU56721 - Memory corruption
CVE-2021-30835
CWE-119 High
No
No
12.12 20.09.2021 SB2021092021
SB2021092023
SB2021092024
and 3 more
#VU55204 - Memory corruption
CVE-2021-30779
CWE-119 High
No
No
12.11.4 22.07.2021 SB2021072214
SB2021072216
SB2021072217
and 3 more


Showing elements 1 - 20 out of 157