Multiple vulnerabilities in Apple iTunes

Açıklama

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A cross-site-scripting (XSS) vulnerability in WebKit can be exploited to perform cross-site scripting attack.
2. A memory initialization vulnerability in CFNetwork can be exploited to obtain sensitive information.
3. A use after free vulnerability in WebRTC can be exploited to cause denial of service or execute arbitrary code.
4. An information disclosure vulnerability in CoreText can be exploited to obtain sensitive information.

Orijinal öneriler

• About the security content of iTunes 12.11.3 for Windows

İlgili ürünler

• Apple-iTunes

CVE Listesi

• CVE-2021-1811
  high
• CVE-2021-1857
  high
• CVE-2021-1825
  high
• CVE-2020-7463
  high

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com