CVE-2010-1769: Apple iTunes

High severity, CVSS 10.0. EPSS: 6.9% chance of exploitation in the next 30 days.

WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, a different vulnerability than CVE-2010-1387 and CVE-2010-1763.

Affected products

• Apple iTunes: up to and including 9.1.1; version 7.0.0 only; version 7.0.1 only; version 7.0.2 only; version 7.1.0 only; version 7.1.1 only; …

Published 2010-06-18. Last modified 2026-06-16.