CVE-2011-0128: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbit...

Security readout for executives and security teams

This is an old Apple iTunes for Windows issue involving WebKit during iTunes Store browsing. On vulnerable versions before iTunes 10.2, a network attacker in a man-in-the-middle position could trigger memory corruption, potentially causing code execution or an application crash. Exposure is most likely limited to legacy Windows endpoints running Apple iTunes earlier than 10.2. Modern fleets are unlikely to be affected unless old software remains on unmanaged, kiosk, lab, or archival systems. Treat as a targeted legacy exposure issue. It is serious where present because code execution is possible, but business urgency depends on whether outdated iTunes for Windows still exists in the environment. Mitigation focus: Upgrade Apple iTunes for Windows to version 10.2 or later.; Remove unsupported legacy iTunes installations where business use is not required.; Check Apple advisory guidance for any environment-specific remediation details..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.