CVE-2023-32353: High severity apple Itunes Windows vulnerability

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2023-32353.

Q: What is the severity of CVE-2023-32353?

The severity of CVE-2023-32353 is high (CVSS score: 7.8).

Q: What is affected by CVE-2023-32353?

iTunes 12.12.9 for Windows and Apple macOS Monterey are affected by CVE-2023-32353.

Q: How can the vulnerability be fixed?

The vulnerability can be fixed by updating to iTunes 12.12.9 for Windows or Apple macOS Monterey.

Q: Is there any additional information available?

Yes, you can find additional information at the following link: [Apple Support - HT213763](https://support.apple.com/en-us/HT213763).

Published May 23, 2023

Updated

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges.

Other sources

iTunes. A logic issue was addressed with improved checks.

— Apple

Credit

Zeeshan Shaikh – Synopsys Cybersecurity Research Center (CyRC)@@bugzzzhunter, ycdxsb@@IIE(VARAS), James Tsz Ko Yeung@@5cript1diot

Affected Software

2 affected componentsFixes available

apple Itunes Windows<12.12.9

apple iTunes for Windows<12.12.9

12.12.9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade iTunes to a version that resolves this vulnerability.
Fixed in 12.12.9
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 12.12.9
Upgrade
Upgrade iTunes for Windows to a version that resolves this vulnerability.
Fixed in 12.12.9

Event History

May 23, 2023

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Jun 8, 2023

Exploit Published

via GitHub·08:43 PM

Jun 23, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID?