CVE-2021-46841: Apple Music

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.

Affected products

• Apple Music: version 3.5.0 only

Published 2023-02-27. Last modified 2026-06-17.