CVE-2011-0138: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbit...

Security readout for executives and security teams

This is an old Apple iTunes for Windows vulnerability fixed in iTunes 10.2. If a user browsed the iTunes Store while an attacker could intercept network traffic, the attacker could potentially crash iTunes or run code through a WebKit memory corruption flaw. Exposure is most likely limited to Windows endpoints still running Apple iTunes versions before 10.2 and using iTunes Store browsing. Modern environments are unlikely to be exposed unless they retain legacy iTunes installations or archived Windows images. Treat this as a legacy exposure cleanup item with high impact if present. It is not a current mass-exploitation signal from the provided sources, but vulnerable iTunes on Windows should be removed or upgraded because the stated impact includes arbitrary code execution. Mitigation focus: Upgrade Apple iTunes for Windows to version 10.2 or later.; Remove obsolete iTunes installations where no business need exists.; Review Apple advisory guidance for any platform-specific update requirements..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.