Known vulnerabilities in iTunes - page 3

Vendor: Apple Inc.
Software: iTunes
Software CPE: cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
Total vulnerabilities: 157
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iTunes iTunes is affected by 157 known vulnerabilities: 64 high, 52 medium, 41 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16304 - Memory corruption
CVE-2018-4464
CWE-119 High
No
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 6 more
#VU16303 - Memory corruption
CVE-2018-4437
CWE-119 High
No
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 10 more
#VU16302 - Memory corruption
CVE-2018-4438
CWE-119 High
No
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 6 more
#VU16301 - Memory corruption
CVE-2018-4443
CWE-119 High
No
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 6 more
#VU16300 - Memory corruption
CVE-2018-4442
CWE-119 High
No
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 6 more
#VU16299 - Memory corruption
CVE-2018-4441
CWE-119 High
Available
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 6 more
#VU16295 - Improper input validation
CVE-2018-4439
CWE-20 Low
No
No
12.9.2 06.12.2018 SB2018120604
SB2018120606
SB2018120607
and 1 more
#VU15666 - Memory corruption
CVE-2018-4378
CWE-119 High
No
No
12.9 31.10.2018 SB2018103110
SB2018103111
SB2018103112
and 3 more
#VU15663 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4377
CWE-79 Low
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103112
SB2018103113
and 2 more
#VU15662 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-4374
CWE-79 Low
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103112
SB2018103113
and 2 more
#VU15657 - Resource exhaustion
CVE-2018-4409
CWE-400 Low
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103111
SB2018103112
and 2 more
#VU15653 - Memory corruption
CVE-2018-4416
CWE-119 High
Available
No
12.9.1 31.10.2018 SB2018103110
SB2018103111
SB2018103112
and 3 more
#VU15652 - Memory corruption
CVE-2018-4392
CWE-119 High
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103111
SB2018103112
and 3 more
#VU15651 - Memory corruption
CVE-2018-4386
CWE-119 High
Available
No
12.9.1 31.10.2018 SB2018103110
SB2018103111
SB2018103112
and 3 more
#VU15650 - Memory corruption
CVE-2018-4382
CWE-119 High
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103111
SB2018103112
and 3 more
#VU15649 - Memory corruption
CVE-2018-4375
CWE-119 High
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103112
SB2018103113
and 2 more
#VU15648 - Memory corruption
CVE-2018-4373
CWE-119 High
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103112
SB2018103113
and 2 more
#VU15647 - Memory corruption
CVE-2018-4372
CWE-119 High
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103111
SB2018103112
and 5 more
#VU15646 - Memory corruption
CVE-2018-4376
CWE-119 High
No
No
12.9.1 31.10.2018 SB2018103110
SB2018103112
SB2018103113
and 2 more
#VU15628 - Heap-based Buffer Overflow
CVE-2018-4394
CWE-122 High
No
No
12.9.1 31.10.2018 SB2018103106
SB2018103110
SB2018103111
and 2 more


Showing elements 41 - 60 out of 157