CVE-2022-48611highCWE-693

CVE-2022-48611: high-severity vulnerability in Apple iTunes for Windows

Published · Updated

Follow this CVE+ Monitor iTunes

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.2%
A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Apple · iTunes for Windows
Related CVEs — Apple iTunes for Windows

In the same product, most dangerous first.

CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEVCVE-2020-9850—CVE-2020-9850EPSS 77.4%CVE-2019-8600—CVE-2019-8600EPSS 20.3%CVE-2019-8689—CVE-2019-8689EPSS 13.6%CVE-2019-8518—CVE-2019-8518EPSS 11.2%CVE-2019-8672—CVE-2019-8672EPSS 11.1%