6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.0%
12/12/2015
High
Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information.
Apple iTunes versions earlier than 12.3.2
Update to the latest version
Get iTunes
ACE
CVE-2015-70486.8High
CVE-2015-71016.8High
CVE-2015-71006.8High
CVE-2015-70504.3Warning
CVE-2015-71026.8High
CVE-2015-71036.8High
CVE-2015-71046.8High
CVE-2015-70956.8High
CVE-2015-70976.8High
CVE-2015-70966.8High
CVE-2015-70996.8High
CVE-2015-70986.8High
www.apple.com/itunes/download/
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7048
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7050
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7095
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7096
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7097
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7098
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7099
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7100
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7101
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7102
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7103
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7104
statistics.securelist.com/vulnerability-scan/month
support.apple.com/en-us/HT205636
threats.kaspersky.com/en/product/Apple-iTunes/