About the security content of iTunes 12.9.2 for Windows

🗓️ 05 Dec 2018 00:00:00Reported by AppleType

The security content of iTunes 12.9.2 for Windows includes patches for Safari and WebKit vulnerabilities. Safari fixes address address bar spoofing and user interface spoofing due to logic issues, while WebKit patches resolve memory corruption and disclosure of sensitive user information

Reporter	Title	Published	Views	Family All 180
0day.today	WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains Exploit	13 Dec 201800:00	–	zdt
0day.today	WebKit JSC JSArray::shiftCountWithArrayStorage Out-Of-Band Read / Write Exploit	29 Dec 201800:00	–	zdt
0day.today	WebKit JSC AbstractValue::set Use-After-Free Exploit	29 Dec 201800:00	–	zdt
0day.today	WebKit JSC JIT - GetIndexedPropertyStorage Use-After-Free Exploit	17 Jan 201900:00	–	zdt
0day.today	SonyPlaystation 4 (PS4) < 6.20 - WebKit Code Execution Exploit	11 Mar 201900:00	–	zdt
GithubExploit	Exploit for Incorrect Type Conversion or Cast in Redhat Enterprise_Linux_Desktop	16 Jan 201913:15	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari	11 Mar 202601:02	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari	8 Mar 201918:06	–	githubexploit
Tenable Nessus	Apple Safari < 12.0.2 Multiple Vulnerabilities	8 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.1.1 Multiple Vulnerabilities (APPLE-SA-2018-12-05-1)	17 Apr 201900:00	–	nessus

Source	Link
support	www.support.apple.com/en-us/HT201222

05 Dec 2018 00:00Current

8High risk

Vulners AI Score8

CVSS 26.8

CVSS 38.8

CVSS 3.16.5

EPSS0.12808