Apple iTunes for Windows

Name: Apple iTunes for Windows
Brand: Apple

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

8critical149high33medium2low

updated 2026-10-27

vulnerabilities (192)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-8506US	high8.8OT critical	16.2% (97th)	KEV	iTunes 12.9.4 for Windows	2019-12-18	unspecified → iTunes 12.9.4 for Windows
CVE-2020-9850US	critical9.8	77.4% (100th)	Exploit	iTunes 12.10.7 for Windows	2020-06-09	unspecified → iTunes 12.10.7 for Windows
CVE-2019-8689US	high8.8	13.6% (96th)	Exploit	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8518US	high8.8	11.2% (96th)	Exploit	iTunes 12.9.4 for Windows	2019-12-18	unspecified → iTunes 12.9.4 for Windows
CVE-2019-8672US	high8.8	11.1% (96th)	Exploit	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-6215US	high8.8	9.75% (96th)	Exploit	iTunes 12.9.3 for Windows	2019-03-05	unspecified → iTunes 12.9.3 for Windows
CVE-2019-8820US	high8.8	9.62% (95th)	Exploit	iTunes for Windows 12.10.2	2019-12-18	unspecified → iTunes for Windows 12.10.2
CVE-2019-8671US	high8.8	8.48% (95th)	Exploit	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8611US	high8.8	8.48% (95th)	Exploit	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2019-8623US	high8.8	8.35% (95th)	Exploit	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2019-8622US	high8.8	8.35% (95th)	Exploit	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2020-9802US	high8.8	8.27% (95th)	Exploit	iTunes 12.10.7 for Windows	2020-06-09	unspecified → iTunes 12.10.7 for Windows
CVE-2019-8558US	high8.8	7.54% (94th)	Exploit	iTunes 12.9.4 for Windows	2019-12-18	unspecified → iTunes 12.9.4 for Windows
CVE-2019-8690US	medium6.1	4.54% (92nd)	Exploit	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8649US	medium6.1	4.54% (92nd)	Exploit	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2023-32353US	high7.8OT elevated	0.66% (51st)	Exploit	12.12	2023-06-23	unspecified → 12.12
CVE-2024-44193US	high7.8	0.40% (34th)	Exploit	12.13.3	2024-10-02	0 → 12.13.3
CVE-2019-8600US	critical9.8	20.3% (97th)	—	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2019-8602US	high7.8	10.3% (96th)	—	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2019-8577US	high7.8	10.3% (96th)	—	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2019-8598US	medium5.5	10.3% (96th)	—	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2020-3878US	high7.8	9.45% (95th)	—	iTunes 12.10.7 for Windows	2020-02-27	unspecified → iTunes 12.10.7 for Windows
CVE-2020-9883US	high7.8	5.96% (93rd)	—	iTunes 12.10.8 for Windows	2020-10-22	unspecified → iTunes 12.10.8 for Windows
CVE-2020-3897US	high8.8	4.66% (92nd)	—	iTunes for Windows 12.10.5	2020-04-01	unspecified → iTunes for Windows 12.10.5
CVE-2020-9895US	critical9.8	4.49% (91st)	—	iTunes 12.10.8 for Windows	2020-10-16	unspecified → iTunes 12.10.8 for Windows
CVE-2020-3899US	high8.8	4.12% (91st)	—	iTunes for Windows 12.10.5	2020-04-01	unspecified → iTunes for Windows 12.10.5
CVE-2019-8601US	high8.8	4.05% (91st)	—	iTunes for Windows 12.9.5	2019-12-18	unspecified → iTunes for Windows 12.9.5
CVE-2021-30835US	high7.8	3.08% (88th)	—	12.12	2021-10-19	unspecified → 12.12
CVE-2020-3909US	critical9.8	3.04% (87th)	—	iTunes for Windows 12.10.5	2020-04-01	unspecified → iTunes for Windows 12.10.5
CVE-2020-9893US	high8.8	2.95% (87th)	—	iTunes 12.10.8 for Windows	2020-10-16	unspecified → iTunes 12.10.8 for Windows
CVE-2020-9894US	medium4.3	2.84% (87th)	—	iTunes 12.10.8 for Windows	2020-10-16	unspecified → iTunes 12.10.8 for Windows
CVE-2020-3868US	high8.8	2.70% (86th)	—	iTunes for Windows 12.10.4	2020-02-27	unspecified → iTunes for Windows 12.10.4
CVE-2020-3895US	high8.8	2.64% (86th)	—	iTunes for Windows 12.10.5	2020-04-01	unspecified → iTunes for Windows 12.10.5
CVE-2019-8570US	medium6.5	2.61% (85th)	—	12.9	2020-10-27	unspecified → 12.9
CVE-2019-8669US	high8.8	2.60% (85th)	—	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8816US	high8.8	2.58% (85th)	—	iTunes for Windows 12.10.2	2019-12-18	unspecified → iTunes for Windows 12.10.2
CVE-2020-9789US	high8.8	2.54% (85th)	—	iTunes 12.10.7 for Windows	2020-06-09	unspecified → iTunes 12.10.7 for Windows
CVE-2019-8814US	high8.8	2.54% (85th)	—	iTunes for Windows 12.10.2	2019-12-18	unspecified → iTunes for Windows 12.10.2
CVE-2020-9790US	high8.8	2.54% (85th)	—	iTunes 12.10.7 for Windows	2020-06-09	unspecified → iTunes 12.10.7 for Windows
CVE-2019-8676US	high8.8	2.48% (85th)	—	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8741US	high7.5	2.46% (84th)	—	iTunes for Windows 12.10.1	2020-02-28	unspecified → iTunes for Windows 12.10.1
CVE-2019-8684US	high8.8	2.44% (84th)	—	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8544US	high8.8	2.35% (84th)	—	iTunes 12.9.4 for Windows	2019-12-18	unspecified → iTunes 12.9.4 for Windows
CVE-2019-8688US	high8.8	2.34% (84th)	—	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8846US	high8.8	2.33% (83rd)	—	12.10	2020-10-27	unspecified → 12.10
CVE-2019-8685US	high8.8	2.31% (83rd)	—	iTunes for Windows 12.9.6	2019-12-18	unspecified → iTunes for Windows 12.9.6
CVE-2019-8815US	high8.8	2.29% (83rd)	—	iTunes for Windows 12.10.2	2019-12-18	unspecified → iTunes for Windows 12.10.2
CVE-2019-8844US	high8.8	2.27% (83rd)	—	12.10	2020-10-27	unspecified → 12.10
CVE-2019-8745US	high8.8	2.22% (83rd)	—	iTunes for Windows 12.10.1	2019-12-18	unspecified → iTunes for Windows 12.10.1
CVE-2020-9910US	high8.8	2.19% (82nd)	—	iTunes 12.10.8 for Windows	2020-10-16	unspecified → iTunes 12.10.8 for Windows

showing 50 of 192

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write107 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer55 CVEs
CWE-416Use After Free15 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')14 CVEs
CWE-125Out-of-bounds Read13 CVEs
CWE-20Improper Input Validation9 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')6 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)192 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan