Apple Itunes vulnerabilities

953 known vulnerabilities affecting apple/itunes.

Total CVEs

953

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL113HIGH487MEDIUM348LOW5

Vulnerabilities

SortPage 40 of 48

CVE-2017-13864P4MEDIUMCVSS 5.9fixed in 12.7.22017-12-25

CVE-2017-13864 [MEDIUM] CWE-200 CVE-2017-13864: An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the "APNs Server" component. It allows man-in-the-middle attackers to track users by leveraging mishandling of client certificates.

nvd

CVE-2011-1296P4HIGHCVSS 7.5fixed in 10.52011-03-25

CVE-2011-1296 [HIGH] CWE-20 CVE-2011-1296: Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers t Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

nvd

CVE-2011-1115P4HIGHCVSS 7.5fixed in 10.52011-03-01

CVE-2011-1115 [HIGH] CVE-2011-1115: Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to c Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

nvd

CVE-2011-1451P4HIGHCVSS 7.5fixed in 10.52011-05-03

CVE-2011-1451 [HIGH] CWE-20 CVE-2011-1451: Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."

nvd

CVE-2012-3660P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3660 [MEDIUM] CVE-2012-3660: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3673P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3673 [MEDIUM] CVE-2012-3673: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3601P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3601 [MEDIUM] CVE-2012-3601: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3613P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3613 [MEDIUM] CVE-2012-3613: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3602P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3602 [MEDIUM] CVE-2012-3602: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3648P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3648 [MEDIUM] CVE-2012-3648: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3671P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3671 [MEDIUM] CVE-2012-3671: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3614P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3614 [MEDIUM] CVE-2012-3614: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3672P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3672 [MEDIUM] CVE-2012-3672: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3708P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3708 [MEDIUM] CVE-2012-3708: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3677P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3677 [MEDIUM] CVE-2012-3677: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3684P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3684 [MEDIUM] CVE-2012-3684: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3612P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3612 [MEDIUM] CVE-2012-3612: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3710P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3710 [MEDIUM] CVE-2012-3710: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3658P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3658 [MEDIUM] CVE-2012-3658: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

CVE-2012-3659P4MEDIUMCVSS 6.8≤ 10.6.3v4.0.0+76 more2012-09-13

CVE-2012-3659 [MEDIUM] CVE-2012-3659: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.

nvd

← Previous40 / 48Next →