Privilege Escalation Vulnerability in iTunes for Windows by Apple
CVE-2023-32353

7.8HIGH

Key Information:

Vendor
Apple
Status
Itunes For Windows
Vendor
CVE Published:
23 June 2023

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A logic issue present in iTunes for Windows has been reported that could allow an application to elevate its privileges. This flaw has been addressed by Apple in version 12.12.9, which includes enhanced checks to mitigate the risk of unauthorized access. Users are encouraged to update to the latest version to safeguard against potential exploitation.

Affected Version(s)

iTunes for Windows < 12.12

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-32353-PoC
Created by 86x

References

https://support.apple.com/en-us/HT213763

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.