Known vulnerabilities in iTunes - page 2

Vendor: Apple Inc.
Software: iTunes
Software CPE: cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
Total vulnerabilities: 157
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iTunes iTunes is affected by 157 known vulnerabilities: 64 high, 52 medium, 41 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55205 - Memory corruption
CVE-2021-30785
CWE-119 High
No
No
12.11.4 22.07.2021 SB2021072214
SB2021072216
SB2021072217
and 4 more
#VU52643 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1825
CWE-79 Medium
No
No
12.11.3 27.04.2021 SB2021042710
SB2021042801
SB2021042802
and 13 more
#VU52605 - Out-of-bounds read
CVE-2021-1811
CWE-125 Medium
No
No
12.11.3 27.04.2021 SB2021042704
SB2021042802
SB2021042803
and 3 more
#VU52600 - Improper Initialization
CVE-2021-1857
CWE-665 Medium
No
No
12.11.3 27.04.2021 SB2021042704
SB2021042802
SB2021042803
and 3 more
#VU46227 - Use After Free
CVE-2020-7463
CWE-416 Low
No
No
12.11.3 03.09.2020 SB2020090303
SB2021042802
SB2021042803
and 2 more
#VU17172 - Memory corruption
CVE-2019-6226
CWE-119 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 6 more
#VU17171 - Memory corruption
CVE-2019-6217
CWE-119 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 7 more
#VU17170 - Memory corruption
CVE-2019-6216
CWE-119 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 7 more
#VU17169 - Memory corruption
CVE-2019-6212
CWE-119 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 9 more
#VU17168 - Type confusion
CVE-2019-6215
CWE-843 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 9 more
#VU17167 - Memory corruption
CVE-2019-6234
CWE-119 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 5 more
#VU17166 - Memory corruption
CVE-2019-6233
CWE-119 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 5 more
#VU17165 - Memory corruption
CVE-2019-6227
CWE-119 High
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 7 more
#VU17164 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-20506
CWE-89 Low
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012302
SB2019012304
and 8 more
#VU17163 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-20505
CWE-89 Low
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012302
SB2019012304
and 5 more
#VU17162 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-20346
CWE-89 Low
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012302
SB2019012304
and 16 more
#VU17161 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-6229
CWE-79 Low
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012303
SB2019012304
and 6 more
#VU17149 - Out-of-bounds read
CVE-2019-6221
CWE-125 Low
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012302
SB2019012501
#VU17147 - Memory corruption
CVE-2019-6235
CWE-119 Low
No
No
12.9.3 23.01.2019 SB2019012301
SB2019012302
SB2019012305
and 2 more
#VU16297 - Improper input validation
CVE-2018-4440
CWE-20 Low
No
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 1 more


Showing elements 21 - 40 out of 157