iTunes
- Known vulnerabilities
- 41
- Still open
- 0
- KEV open
- 0
- Max CVSS (historical)
- 8.8
Cumulative exposure
Low
Aggregates open CVEs (40%) + KEV (30%) + critical shared permissions (15%) + trackers (10%) + OS EOL (5%). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Known vulnerabilities (CVE)
Latest matched CVE: 2024 · limited CPE coverage for this vendor — absence of recent CVEs is not a guarantee
Test a different version
| CVE |
|---|
|
CVE-2024-44157
Fixed
MEDIUM 5.5
Local Fixed in: 12.13.3
|
|
CVE-2024-44193
Fixed
HIGH 7.8
Local Fixed in: 12.13.3
|
|
CVE-2024-27793
Fixed
HIGH 7.8
Local Fixed in: 12.13.2
|
|
CVE-2022-48611
Fixed
HIGH 7.8
Local Fixed in: 12.12.4
|
|
CVE-2023-42938
Fixed
HIGH 7.8
Local Fixed in: 12.13.1
|
|
CVE-2023-32353
Fixed
HIGH 7.8
Local Fixed in: 12.12.9
|
|
CVE-2023-32351
Fixed
HIGH 7.8
Local Fixed in: 12.12.9
|
|
CVE-2022-26774
Fixed
HIGH 7.8
Local Fixed in: 12.12.4
|
|
CVE-2022-26773
Fixed
HIGH 7.1
Local Fixed in: 12.12.4
|
|
CVE-2020-7463
Fixed
MEDIUM 5.5
Local Fixed in: 12.11.3
|
|
CVE-2020-27895
Fixed
LOW 3.3
Local Fixed in: 12.11
|
|
CVE-2020-9999
Fixed
HIGH 7.8
Local Fixed in: 12.10.9
|
|
CVE-2020-9961
Fixed
HIGH 7.8
Local Fixed in: 12.10.9
|
|
CVE-2020-9951
Fixed
HIGH 8.8
Network Fixed in: 12.10.9
|
|
CVE-2020-13631
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.9
|
|
CVE-2020-13630
Fixed
HIGH 7.0
Local Fixed in: 12.10.9
|
|
CVE-2020-13434
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.9
|
|
CVE-2020-11765
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2020-11764
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2020-11763
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2020-11762
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2020-11761
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2020-11760
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2020-11759
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2020-11758
Fixed
MEDIUM 5.5
Local Fixed in: 12.10.8
|
|
CVE-2019-8741
Fixed
HIGH 7.5
Network Fixed in: 12.10.1
|
|
CVE-2020-3861
Fixed
HIGH 7.1
Local Fixed in: 12.10.4
|
|
CVE-2019-8801
Fixed
HIGH 7.8
Local Fixed in: 12.10.2
|
|
CVE-2019-8745
Fixed
HIGH 8.8
Network Fixed in: 12.10.1
|
|
CVE-2019-8735
Fixed
HIGH 8.8
Network Fixed in: 12.10.1
|
|
CVE-2019-8733
Fixed
HIGH 8.8
Network Fixed in: 12.10.1
|
|
CVE-2019-8726
Fixed
HIGH 8.8
Network Fixed in: 12.10.1
|
|
CVE-2019-8719
Fixed
MEDIUM 6.1
Network Fixed in: 12.10.1
|
|
CVE-2019-8707
Fixed
HIGH 8.8
Network Fixed in: 12.10.1
|
|
CVE-2019-8625
Fixed
MEDIUM 6.1
Network Fixed in: 12.10.1
|
|
CVE-2019-13118
Fixed
MEDIUM 5.3
Network Fixed in: 12.9.6
|
|
CVE-2017-2480
Fixed
MEDIUM 6.5
Network Fixed in: > 12.5.5.5
|
|
CVE-2017-2356
Fixed
HIGH 8.8
Network Fixed in: 12.5.5
|
|
CVE-2017-2355
Fixed
HIGH 8.8
Network Fixed in: 12.5.5
|
|
CVE-2017-2354
Fixed
HIGH 8.8
Network Fixed in: 12.5.5
|
1 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Security Score
Excellent
Composite: 50% open CVEs + 40% open KEVs + 10% vendor velocity.
-
Open CVEs 0/-50
0 CVEs
-
Open KEVs 0/-40
0 KEVs
-
Vendor 0/-10
100% fresh
Context
Context
Description
iTunes offers the world’s best way to play — and add to — your collection of music, movies, TV shows, podcasts, audiobooks, and more.
Other apps by this publisher
Apps published by Apple Inc.
winget:Apple.AirPort
winget:Apple.AppleMobileDeviceSupportwinget:Apple.AppleSoftwareUpdate
winget:Apple.Bonjourwinget:Apple.BonjourPrintServiceswinget:Apple.DVDorCDSharingFAQ
FAQ: iTunes
Does iTunes have known security vulnerabilities?
iTunes (winget:Apple.iTunes) on Windows has 41 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is the current version of iTunes affected by any open CVE?
Version 12.13.10.3 of iTunes on Windows has no open CVE referenced in NVD. Absence of a CVE is not a security guarantee.
Is iTunes affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting iTunes (winget:Apple.iTunes) is currently in the CISA KEV catalog.
What is the latest known version of iTunes?
The most recent version of iTunes (winget:Apple.iTunes) tracked by Appaloosa Scout is 12.13.10.3, published by Apple Inc..