Where
-Infinity
0

Trending

Last week
Last month
Last year

apple Itunes WindowsA logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows.…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.

First published (updated )
CVE-2022-48611

apple iTunes for Windows1 vulnerability

Risk 23
First published (updated )
Advisory
HT214091

Mobile Device Service. A logic issue was addressed with improved checks.

Risk 72
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker may be able to elevate their privileges.

1 / 2
Source: MITRE
First published (updated )
CVE-2023-42938

Apple iTunesApple iTunes Incorrect Permission Assignment Privilege Escalation Vulnerability

Risk 38

This vulnerability allows local attackers to escalate privileges on affected installations of Apple iTunes. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2022-26773.

First published (updated )
Advisory
ZDI-23-1497

Apple iTunesZDI-23-1497: Apple iTunes Incorrect Permission Assignment Privilege Escalation Vulnerability

Risk 38

This vulnerability allows local attackers to escalate privileges on affected installations of Apple iTunes. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2022-26773.

First published (updated )
ZDI-CAN-16895

apple iTunes for Windows1 vulnerability

Risk 32
First published (updated )
Advisory
APPLE-103001

apple iTunes for Windows1 vulnerability

Risk 32
First published (updated )
Advisory
APPLE-HT213259

apple iTunes for Windows2 vulnerabilities

Risk 32
First published (updated )
Advisory
HT213259

Mobile Device Service. A logic issue was addressed with improved state management.

Risk 52
Severity
7.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.

1 / 2
First published (updated )
CVE-2022-26773

iTunes. A logic issue was addressed with improved state management.

Risk 70
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.

1 / 2
First published (updated )
CVE-2022-26774

apple iTunes for Windows2 vulnerabilities

Risk 32
First published (updated )
Advisory
HT213188

Input Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. An out-of-bounds read was addressed with improved input validation.

1 / 6
First published (updated )
CVE-2022-22611

ImageIO. A memory consumption issue was addressed with improved memory handling.

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption.

1 / 2
First published (updated )
CVE-2022-22612

apple iTunes for Windows5 vulnerabilities

Risk 32
First published (updated )
Advisory
HT212817

Input Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.

1 / 2
First published (updated )
CVE-2021-30814

ImageIO. This issue was addressed with improved checks.

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. This issue was addressed with improved checks.

1 / 8
First published (updated )
CVE-2021-30835

ImageIO. This issue was addressed with improved checks.

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageIO. This issue was addressed with improved checks.

1 / 2
First published (updated )
CVE-2021-30847

Input Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CoreGraphics. A memory corruption issue was addressed with improved input validation.

1 / 8
First published (updated )
CVE-2021-30928

Foundation. A type confusion issue was addressed with improved memory handling.

Risk 78
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Foundation. A type confusion issue was addressed with improved memory handling.

1 / 8
First published (updated )
CVE-2021-30852

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203