CVE-2023-42938

2024-03-1419:15:49

[email protected]

web.nvd.nist.gov

859

cve-2023-42938

logic issue

itunes

windows

privilege escalation

5.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.8%

JSON

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker may be able to elevate their privileges.

Affected configurations

Vulners

Node

appleitunesRange<12.13

VendorProductVersionCPE
appleitunes*cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	itunes	*	cpe:2.3:a:apple:itunes::::::::

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iTunes for Windows",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "12.13",
        "versionType": "custom"
      }
    ]
  }
]