KLA49284 Multiple vulnerabilities in Apple iTunes

An elevation of privilege vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to gain privileges.

Original advisories

About the security content of iTunes 12.12.9 for Windows

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Apple-iTunes

CVE list

CVE-2023-32353 critical

CVE-2023-32351 critical

CVE-2023-32430 unknown

Solution

Update to the latest version

Download iTunes

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Apple iTunes earlier than 12.12.9