Known vulnerabilities in iTunes - page 5

Vendor: Apple Inc.
Software: iTunes
Software CPE: cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
Total vulnerabilities: 157
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iTunes iTunes is affected by 157 known vulnerabilities: 64 high, 52 medium, 41 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU13145 - Out-of-bounds read
CVE-2018-4222
CWE-125 Low
No
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 9 more
#VU13144 - Exposure of sensitive information to an unauthorized actor
CVE-2018-4190
CWE-200 Low
No
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 8 more
#VU13142 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-4188
CWE-451 Low
No
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 2 more
#VU13139 - Buffer overflow
CVE-2018-4199
CWE-120 High
No
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 8 more
#VU13138 - Memory corruption
CVE-2018-4233
CWE-119 High
Available
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 9 more
#VU13137 - Memory corruption
CVE-2018-4218
CWE-119 High
No
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 9 more
#VU13136 - Memory corruption
CVE-2018-4201
CWE-119 High
No
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 4 more
#VU13135 - Memory corruption
CVE-2018-4214
CWE-119 High
No
No
- 04.06.2018 SB2018060401
SB2018060406
SB2018060407
and 4 more
#VU13133 - Type confusion
CVE-2018-4246
CWE-843 High
No
No
- 02.06.2018 SB2018060401
SB2018060406
SB2018060407
and 7 more
#VU12146 - Memory corruption
CVE-2018-4204
CWE-119 High
No
No
- 25.04.2018 SB2018042502
SB2018042520
SB2018060406
and 5 more
#VU12145 - Memory corruption
CVE-2018-4200
CWE-119 High
No
No
- 25.04.2018 SB2018042502
SB2018042520
SB2018051403
and 8 more
#VU10203 - Memory corruption
CVE-2018-4096
CWE-119 High
No
No
- 24.01.2018 SB2018012406
SB2018012407
SB2018012408
and 7 more
#VU10201 - Memory corruption
CVE-2018-4088
CWE-119 High
No
No
- 24.01.2018 SB2018012406
SB2018012407
SB2018012408
and 7 more
#VU9671 - Exposure of sensitive information to an unauthorized actor
CVE-2017-13864
CWE-200 Low
No
No
- 18.12.2017 SB2017121407
SB2017121406
#VU9670 - Memory corruption
CVE-2017-13866
CWE-119 High
No
No
- 18.12.2017 SB2017121307
SB2017121406
SB2017121407
and 5 more
#VU9669 - Memory corruption
CVE-2017-13870
CWE-119 High
No
No
- 18.12.2017 SB2017121307
SB2017121406
SB2017121407
and 5 more
#VU9668 - Memory corruption
CVE-2017-13856
CWE-119 High
No
No
- 18.12.2017 SB2017121307
SB2017121406
SB2017121407
and 5 more
#VU9667 - Memory corruption
CVE-2017-7157
CWE-119 High
No
No
- 18.12.2017 SB2017121307
SB2017121406
SB2017121407
and 4 more
#VU9666 - Memory corruption
CVE-2017-7156
CWE-119 High
No
No
- 18.12.2017 SB2017121307
SB2017121406
SB2017121407
and 5 more
#VU1096 - Improper input validation
CVE-2016-7578
CWE-20 High
No
No
- 31.10.2016 SB2016103102


Showing elements 81 - 100 out of 157