vulnerability

Apple iTunes security update for CVE-2022-26717

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

May 19, 2022

Added

May 19, 2022

Modified

Mar 27, 2026

Description

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Solution

apple-itunes-upgrade-latest

References

CVE-2022-26717
https://attackerkb.com/topics/CVE-2022-26717
CWE-416
EUVD-EUVD-2022-31267
http://support.apple.com/kb/HT213259
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-31267

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report