CVE-2024-44193

A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local attacker may be able to elevate their privileges.
References
Link Resource
https://support.apple.com/en-us/121328 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*

History

13 Mar 2025, 16:15

Type Values Removed Values Added
CWE CWE-281

11 Dec 2024, 02:53

Type Values Removed Values Added
CPE cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
First Time Apple
Apple itunes
CWE NVD-CWE-noinfo
References () https://support.apple.com/en-us/121328 - () https://support.apple.com/en-us/121328 - Vendor Advisory
CVSS v2 : unknown
v3 : 8.4
v2 : unknown
v3 : 7.8

03 Oct 2024, 20:35

Type Values Removed Values Added
Summary
  • (es) Se solucionó un problema de lógica mejorando las restricciones. Este problema se solucionó en iTunes 12.13.3 para Windows. Un atacante local podría elevar sus privilegios.
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.4

02 Oct 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-02 15:15

Updated : 2025-03-13 16:15


NVD link : CVE-2024-44193

Mitre link : CVE-2024-44193

CVE.ORG link : CVE-2024-44193


JSON object : View

Products Affected

apple

  • itunes
CWE
NVD-CWE-noinfo CWE-281

Improper Preservation of Permissions