Vulnerabilities > Apple > Itunes > 12.9.1

DATE CVE VULNERABILITY TITLE RISK
2020-10-16 CVE-2020-9925 Cross-site Scripting vulnerability in Apple products
A logic issue was addressed with improved state management.
network
low complexity
apple CWE-79
6.1
2020-10-16 CVE-2020-9916 Unspecified vulnerability in Apple products
A URL Unicode encoding issue was addressed with improved state management.
network
low complexity
apple
5.3
2020-10-16 CVE-2020-9915 Unspecified vulnerability in Apple products
An access issue existed in Content Security Policy.
network
low complexity
apple
6.5
2020-10-16 CVE-2020-9910 Unspecified vulnerability in Apple products
Multiple issues were addressed with improved logic.
network
low complexity
apple
8.8
2020-10-16 CVE-2020-9895 Use After Free vulnerability in Apple products
A use after free issue was addressed with improved memory management.
network
low complexity
apple CWE-416
critical
9.8
2020-10-16 CVE-2020-9894 Out-of-bounds Read vulnerability in Apple products
An out-of-bounds read was addressed with improved input validation.
network
low complexity
apple CWE-125
4.3
2020-10-16 CVE-2020-9893 Use After Free vulnerability in Apple products
A use after free issue was addressed with improved memory management.
network
low complexity
apple CWE-416
8.8
2020-10-16 CVE-2020-9862 Improper Encoding or Escaping of Output vulnerability in Apple products
A command injection issue existed in Web Inspector.
local
low complexity
apple CWE-116
7.8
2020-06-09 CVE-2020-9850 Unspecified vulnerability in Apple products
A logic issue was addressed with improved restrictions.
network
low complexity
apple
critical
9.8
2020-06-09 CVE-2020-9843 Cross-site Scripting vulnerability in Apple products
An input validation issue was addressed with improved input validation.
network
low complexity
apple CWE-79
7.1