Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

apple iTunes for WindowsiTunes. A logic issue was addressed with improved restrictions.

Risk 74
Severity
8.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local attacker may be able to elevate their privileges.

1 / 2
Source: MITRE
First published (updated )
CVE-2024-44193

apple iTunes for WindowsCode Injection

Risk 71
Severity
7.8
Code Injection
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CoreMedia. The issue was addressed with improved checks.

1 / 2
Source: Apple
First published (updated )
CVE-2024-27793

apple Itunes WindowsiTunes. A logic issue was addressed with improved checks.

Risk 72
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges.

1 / 2
First published (updated )
CVE-2023-32353

apple iTunes for WindowsiTunes. A logic issue was addressed with improved checks.

Risk 72
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges.

1 / 2
First published (updated )
CVE-2023-32351

debian/webkit2gtkUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Risk 79
Severity
8.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 56
First published (updated )
CVE-2022-26717

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution.

1 / 8
First published (updated )
CVE-2022-26751

Apple macOS Big SurApple macOS ImageIO PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 69
Severity
7.8
Buffer Overflow, Input Validation, Race Condition, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution.

1 / 30
Source: MITRE
First published (updated )
CVE-2021-30785

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow, Use After Free

Risk 69
Severity
7.8
Input Validation, Race Condition, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 28
Source: Apple
First published (updated )
CVE-2021-30779

SQLite SQLiteUse After Free, SQL Injection

Risk 67
Severity
7
Use After Free, SQL Injection
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow related to the snippet feature.

1 / 5
Source: Microsoft
First published (updated )
CVE-2020-13630

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3901

redhat/webkitgtkWebKit. A memory consumption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3899

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3895

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3900

Apple This document describes the security content of tvOSUse After Free

Risk 78
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution.

1 / 2
First published (updated )
CVE-2020-9783

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3897

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 8
First published (updated )
CVE-2020-3826

Apple tvOSInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 12
First published (updated )
CVE-2020-3878

Apple tvOSBuffer Overflow, Input Validation

Risk 78
Severity
8.8
Buffer Overflow, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

libxml2. A buffer overflow was addressed with improved size validation.

1 / 8
First published (updated )
CVE-2020-3846

redhat/webkitgtkWebKit. Multiple memory corruption issues were addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3868

redhat/webkitgtkWebKit Page Loading. A logic issue was addressed with improved validation.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3865

apple Itunes WindowsMobile Device Service. The issue was addressed with improved permissions logic.

Risk 53
Severity
7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Mobile Device Service. The issue was addressed with improved permissions logic.

1 / 2
First published (updated )
CVE-2020-3861

redhat/jbcs-httpd24-curlLast updated 11 July 2025

Risk 46
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber (or XMLGetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

1 / 6

Remedy

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2019-15903

redhat/webkitgtkApple Multiple Products Type Confusion Vulnerability

Risk 97
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

1 / 5
Source: CISA
First published (updated )
CVE-2019-8506

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8524

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8558

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8563

redhat/webkitgtkLast updated 25 August 2025

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2019-8559

Apple tvOSLast updated 25 August 2025

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 25 August 2025

1 / 3
Source: Ubuntu
First published (updated )
CVE-2019-6212

Apple tvOSLast updated 25 August 2025

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: Launchpad
First published (updated )
CVE-2019-6215

Apple tvOSSQL Injection

Risk 45
Severity
7.5
SQL Injection
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Last updated 25 August 2025

1 / 4
Source: Ubuntu
First published (updated )
CVE-2018-20505

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203