Multiple vulnerabilities in Apple iTunes

Description

Multiple serious vulnerabilities have been found in Apple iTunes for Windows. These vulnerabilities have been found in WebKit component and can be exploited remotely to execute arbitrary code, perform cross-site scripting, bypass security restrictions and obtain sensitive information.

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Original advisories

• About the security content of iTunes 12.7 for Windows

Exploitation

Public exploits exist for this vulnerability.

Related products

• Apple-iTunes

CVE list

• CVE-2017-7081
  critical
• CVE-2017-7087
  critical
• CVE-2017-7090
  critical
• CVE-2017-7091
  critical
• CVE-2017-7092
  critical
• CVE-2017-7093
  critical
• CVE-2017-7094
  critical
• CVE-2017-7095
  critical
• CVE-2017-7096
  critical
• CVE-2017-7098
  critical
• CVE-2017-7099
  critical
• CVE-2017-7100
  critical
• CVE-2017-7102
  critical
• CVE-2017-7104
  critical
• CVE-2017-7107
  critical
• CVE-2017-7109
  high
• CVE-2017-7111
  critical
• CVE-2017-7117
  critical
• CVE-2017-7120
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com