CVE-2016-4769

HIGH 8.8CVE-2016-4769 · Published 25/09/2016 · updated 17/06/2026

In short

CVE-2016-4769 is a HIGH (CVSS 8.8) vulnerability affecting itunes (apple), safari (apple).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
itunes apple	`≤ 12.4.3`	No fix yet
safari apple	`≤ 9.1.3`	No fix yet

Description

WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

References

lists.apple.com/archives/security-announce/2016/Sep/msg00007.html · Mailing List
lists.apple.com/archives/security-announce/2016/Sep/msg00012.html · Mailing List
securityfocus.com/bid/93062
securitytracker.com/id/1036854
support.apple.com/HT207157 · Vendor Advisory
support.apple.com/HT207158 · Vendor Advisory

More vulnerabilities in itunes

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

itunes

apple

≤ 12.4.3

No fix yet

safari

apple

≤ 9.1.3

No fix yet

More vulnerabilities in itunes

See all →