CVE-2010-1768: Apple iTunes

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.

Affected products

• Apple iTunes: up to and including 9.0.3; version 1.0 only; version 1.1.0 only; version 1.1.1 only; version 1.1.2 only; version 2.0.0 only; …

Published 2010-08-20. Last modified 2026-06-16.