CVE-2016-1742: Apple iTunes

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected products

• Apple iTunes: up to and including 12.3.1

Published 2016-05-20. Last modified 2026-06-17.