CVE-2011-0151: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbit...

Security readout for executives and security teams

This is an old Apple iTunes for Windows vulnerability in the embedded WebKit engine. A network-positioned attacker could potentially make iTunes crash or run code when a user browsed the iTunes Store. The main business concern is unmanaged legacy Windows systems still running iTunes before 10.2. Exposure is most likely on legacy Windows endpoints, VMs, or images with iTunes older than 10.2. Current managed fleets are unlikely to be affected unless old iTunes installations remain for device support, media workflows, or archived systems. Treat this as a legacy hygiene risk, not a current emergency, unless old Windows iTunes installations remain in production. The code execution impact justifies cleanup, but there is no source-provided evidence of active exploitation. Mitigation focus: Inventory Windows systems for installed iTunes versions.; Upgrade affected iTunes installations to 10.2 or later, following Apple guidance.; Remove obsolete iTunes where there is no business need..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.