← Back

Itunes

itunes

Vendor: Apple • 922 CVEs

CVEs (922)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20506
3Apple
OpensuseSqlite
8Icloud
Iphone OsItunes+5 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, al...Show more
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.Show less
CVE-2018-20505
2Apple
Sqlite
6Icloud
Iphone OsItunes+3 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in...Show more
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).Show less
CVE-2017-7151
1Apple
5Iphone Os
ItunesMac Os X+2 more
Nov 21, 2024
Apr 3, 2019
N/A· v4
7.0 HIGH· v3
5.1 MEDIUM· v2
A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sierra 10.13.4.
CVE-2019-6234
2Apple
Webkitgtk
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web...Show more
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6233
1Apple
5Icloud
Iphone OsItunes+2 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web...Show more
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6229
1Apple
5Icloud
Iphone OsItunes+2 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead...Show more
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to universal cross site scripting.Show less
CVE-2019-6227
1Apple
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciou...Show more
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6226
1Apple
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing...Show more
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6221
1Apple
3Iphone Os
ItunesMac Os X
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges.
CVE-2019-6217
1Apple
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing...Show more
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6216
1Apple
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing...Show more
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6215
2Apple
Canonical
7Icloud
Iphone OsItunes+4 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web co...Show more
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6212
2Apple
Canonical
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously cr...Show more
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6235
1Apple
5Iphone Os
ItunesMac Os X+2 more
Jun 17, 2026
Mar 4, 2019
N/A· v4
10.0 CRITICAL· v3
7.5 HIGH· v2
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumv...Show more
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.Show less
CVE-2018-4278
2Apple
Canonical
6Icloud
Iphone OsItunes+3 more
Nov 21, 2024
Jan 11, 2019
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addresse...Show more
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.Show less
CVE-2018-4262
2Apple
Canonical
7Icloud
Iphone OsItunes+4 more
Nov 21, 2024
Jan 11, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issues were addressed with improved memory handling.
CVE-2018-4213
3Apple
CanonicalWebkitgtk
8Icloud
Iphone OsItunes+5 more
Nov 21, 2024
Jan 11, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed wit...Show more
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.Show less
CVE-2018-4212
3Apple
CanonicalWebkitgtk
8Icloud
Iphone OsItunes+5 more
Nov 21, 2024
Jan 11, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed wit...Show more
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.Show less
CVE-2018-4210
3Apple
CanonicalWebkitgtk
7Iphone Os
ItunesSafari+4 more
Nov 21, 2024
Jan 11, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed w...Show more
In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.Show less
CVE-2018-4209
3Apple
CanonicalWebkit
8Icloud
Iphone OsItunes+5 more
Nov 21, 2024
Jan 11, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed wit...Show more
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.Show less