CVE-2022-26773highCWE-285

CVE-2022-26773: high-severity vulnerability in Apple iTunes for Windows

Published · Updated

Follow this CVE+ Monitor iTunes

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.6%
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Affected products
Apple · iTunes for Windows
Related CVEs — Apple iTunes for Windows

In the same product, most dangerous first.

CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEVCVE-2020-9850—CVE-2020-9850EPSS 77.4%CVE-2019-8600—CVE-2019-8600EPSS 20.3%CVE-2019-8689—CVE-2019-8689EPSS 13.6%CVE-2019-8518—CVE-2019-8518EPSS 11.2%CVE-2019-8672—CVE-2019-8672EPSS 11.1%