CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-44193

High Severity
Apple
SVRS
40/100

CVSSv3
7.8/10

EPSS
0.00256/1

CVE-2024-44193 is a privilege elevation vulnerability in iTunes 12.13.3 for Windows. A local attacker could exploit this logic issue to gain higher-level access to the system. While the CVSS score is 7.8, indicating high severity, the SOCRadar Vulnerability Risk Score (SVRS) is 40, suggesting a lower level of immediate risk compared to vulnerabilities with SVRS scores above 80. This means that although the vulnerability is present, it may not be actively exploited in the wild or associated with sophisticated threat actors. It's crucial to apply the update to mitigate the potential risk, especially in environments where local privilege escalation could have significant consequences. Despite the lower SVRS, patching remains essential for maintaining a strong security posture and preventing potential future exploitation. Ignoring this vulnerability could eventually lead to unauthorized system access and data compromise.

In The Wild
CVSS:3.1
AV:L
AC:L
PR:L
UI:N
S:U
C:H
I:H
A:H
2024-10-02

2025-03-13

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

ISC StormCast for Tuesday, October 8th, 2024
Dr. Johannes B. Ullrich2024-10-08
ISC StormCast for Tuesday, October 8th, 2024 | Daily 5 min cyber security news summary. News, patches, vulnerabilities and trends in information and network security. Sequoia Update Issues; Cisco Vuln; iTunes Priv Esc PoC; ISP Wiretap SpyingmacOS Sequoia: System/Network Admins, Hold On! https://isc.sans.edu/diary/macOS%20Sequoia%3A%20System%20Network%20Admins%2C%20Hold%20On!/31330 Cisco Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv34x-privesc-rce-qE33TCms Apple iTunes PoC https://github.com/mbog14/CVE-2024-44193 Attackers used ISP's Wiretap System to Spy on Users<br
sans.edu
rss
forum
news
CVE-2024-44193 | Apple iTunes up to 12.12.2 on Windows Local Privilege Escalation (Nessus ID 207808)
vuldb.com2024-12-11
CVE-2024-44193 | Apple iTunes up to 12.12.2 on Windows Local Privilege Escalation (Nessus ID 207808) | A vulnerability was found in Apple iTunes up to 12.12.2 on Windows. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to Local Privilege Escalation. This vulnerability is handled as CVE-2024-44193. Local access is required to approach this attack. Furthermore, there is an exploit
vuldb.com
rss
forum
news
This local privilege escalation vulnerability in iTunes could spell big trouble for Windows users - TechRadar
2024-11-03
This local privilege escalation vulnerability in iTunes could spell big trouble for Windows users - TechRadar | News Content: Cyfirma Research recently discovered a serious security vulnerability affecting users of iTunes on Windows systems. This local privilege escalation vulnerability, classified as CVE-2024-44193, allows attackers with limited access to elevate their privileges, potentially compromising entire systems. The vulnerability, present in iTunes for Windows version 12.13.2.3 and earlier, poses a critical threat to the security of systems, making timely updates and patching essential. The core issue behind CVE-2024-44193 lies in improper permission management, specifically related to the AppleMobileDeviceService.exe. Attackers can
google.com
rss
forum
news
This local privilege escalation vulnerability in iTunes could spell big trouble for Windows users
2024-11-03
This local privilege escalation vulnerability in iTunes could spell big trouble for Windows users | CVE-2024-44193 is a serious local privilege escalation vulnerability in iTunes for Windows. Cyfirma Research recently discovered a serious security vulnerability affecting users of iTunes on Windows systems.This local privilege escalation vulnerability, classified as CVE-2024-44193, allows attackers with limited access to elevate their privileges, potentially compromising entire systems.The vulnerability, present in iTunes for Windows</a
techradar.com
rss
forum
news
China's Salt Typhoon breached US wiretapping systems. - The CyberWire
2024-10-12
China's Salt Typhoon breached US wiretapping systems. - The CyberWire | News Content: By the CyberWire staff At a glance. China's Salt Typhoon breached US wiretapping systems. Internet Archive sustains major breach and DDoS attacks. American Water hit by cyberattack. Colorado health system hit by ransomware. Comcast discloses third-party breach. New version of the Octo Android Trojan impersonates popular apps. GoldenJackal conducts cyberespionage against air-gapped systems. ODNI issues report on foreign interference campaigns targeting US elections. Ukrainian hackers disrupt Russia’s court information system. China's Salt Typhoon breached US wiretapping systems. The Washington Post reports that the
apt
middle east
asian
rector
Hacking Windows through iTunes - Local Privilege Escalation 0-day (CVE-2024–44193)
/u/Titokhan2024-10-07
Hacking Windows through iTunes - Local Privilege Escalation 0-day (CVE-2024–44193) | &#32; submitted by &#32; /u/Titokhan [link] &#32; [comments]&#32; submitted by &#32; /u/Titokhan [link]
reddit.com
rss
forum
news

Social Media

Critical iTunes Vulnerability CVE-2024-44193: Risks &amp; Remedies for Windows Users https://t.co/lgPgSBNtlQ
0
0
0
#exploit 1. CVE-2024-35250: Windows 11 Kernel-Mode Driver EoP/LPE https://t.co/UxEoBwWNoA 2. CVE-2024-44193: iTunes for Windows - LPE https://t.co/C3p0B828YB 3. CVE-2024-9464: Palo Alto Expedition Authenticated CI https://t.co/5OPNnJ7NGY
1
0
0
PoC Exploit Releases for CVE-2024-44193: Local Privilege Escalation Vulnerability in iTunes https://t.co/JY89wlNbkS
0
0
0
CVE-2024-44193 Local Privilege Escalation in iTunes 12.13.3 for Windows A logic problem was fixed with better restrictions. This fix is available in iTunes 12.13.3 for Windows. This issue could let a local attack... https://t.co/xT0VV7HTNn
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
AppAppleitunes

References

ReferenceLink
[email protected]https://support.apple.com/en-us/121328

CWE Details

CWE IDCWE NameDescription
CWE-281Improper Preservation of PermissionsThe software does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence