Multiple vulnerabilities in Apple iTunes

Description

Multiple serious vulnerabilities have been found in Apple iTunes for Windows. These vulnerabilities have been found in WebKit component and can be exploited remotely to execute arbitrary code, perform cross-site scripting, bypass security restrictions and obtain sensitive information.

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Original advisories

• About the security content of iTunes 12.7 for Windows

Exploitation

Public exploits exist for this vulnerability.

Related products

• Apple-iTunes

CVE list

• CVE-2017-7081
  high
• CVE-2017-7087
  high
• CVE-2017-7090
  warning
• CVE-2017-7091
  high
• CVE-2017-7092
  high
• CVE-2017-7093
  high
• CVE-2017-7094
  high
• CVE-2017-7095
  high
• CVE-2017-7096
  high
• CVE-2017-7098
  high
• CVE-2017-7099
  high
• CVE-2017-7100
  high
• CVE-2017-7102
  high
• CVE-2017-7104
  high
• CVE-2017-7107
  high
• CVE-2017-7109
  warning
• CVE-2017-7111
  high
• CVE-2017-7117
  high
• CVE-2017-7120
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com