CVE-2011-0127: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbit...

Security readout for executives and security teams

This is an old Apple iTunes for Windows issue where WebKit handling during iTunes Store browsing could let a network attacker between the user and Apple content crash iTunes or run code. Business urgency depends on whether any Windows endpoint still has iTunes older than 10.2. Exposure appears limited to Windows systems running Apple iTunes before 10.2, especially where users browse the iTunes Store on untrusted or interceptable networks. The provided affected-product metadata is incomplete, so confirm against Apple advisories and local inventory. Prioritize discovery over emergency response. This is potentially serious code execution, but it is old, product-specific, and not listed as KEV in the supplied data. Patch or remove any remaining legacy iTunes installations. Mitigation focus: Upgrade iTunes for Windows to version 10.2 or later where present.; Remove obsolete iTunes installations if they are not business-required.; Restrict iTunes Store browsing from unmanaged or untrusted networks..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.