CVE-2022-26774

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges...

CVE-2022-26773

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

CVE-2022-26773

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

CVE-2022-26751

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

Memory corruption

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2022-26774

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges...

CVE-2022-26774

CVE-2022-26774 affects Apple iTunes running on Windows prior to 12.12.4. The vulnerability is a logic issue related to improved state management, which could allow a local attacker to elevate privileges. Apple’s security content for iTunes 12.12.4 for Windows confirms the fix is included in this ...

CVE-2022-26773

CVE-2022-26773 applies to Apple iTunes for Windows, where a logic issue in Mobile Device Service could allow an application to delete files without proper permissions. Apple’s security content for iTunes 12.12.4 for Windows describes this as a local issue (with privilege elevation risk) resolved ...

CVE-2022-26773

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

CVE-2022-26773

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

CVE-2022-26711

An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution...

CVE-2022-26751

CVE-2022-26751 describes a memory corruption issue triggered by processing a maliciously crafted image. The vulnerability is addressed by Apple in iTunes 12.12.4 for Windows, and in iOS 15.5 / iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, and macOS Monterey 12.4. The fixed...

CVE-2022-26751

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2022-26711

CVE-2022-26711 describes an integer overflow in Apple's ImageIO WebP parsing. The root cause is an overflow in row-bytes calculation leading to an undersized buffer and out-of-bounds access during image decoding, enabling arbitrary code execution in apps using ImageIO (Safari, Preview, Mail, Mess...

PT-2022-18073 · Apple · Itunes

Name of the Vulnerable Software and Affected Versions: Apple iTunes versions prior to 12.12.4 for Windows Description: A logic issue was addressed with improved state management, allowing an application to potentially delete files for which it does not have permission. Recommendations: For Apple...

PT-2022-18074 · Apple · Itunes

Name of the Vulnerable Software and Affected Versions: iTunes versions prior to 12.12.4 Description: A logic issue was addressed with improved state management, which could allow a local attacker to elevate their privileges. Recommendations: For versions prior to 12.12.4, update to iTunes 12.12.4...

Apple iTunes < 12.12.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213259 advisory. - A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for...

Apple iTunes < 12.12.4 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213259 advisory. - A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for...