CVE-2011-0154: WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort...

Security readout for executives and security teams

This is an old Apple WebKit memory corruption issue affecting iTunes before 10.2 on Windows and Apple iOS, tied to JavaScript array sorting during iTunes Store browsing. A network man-in-the-middle attacker could potentially crash the application or execute code. It matters mainly where legacy Apple software remains in use. Exposure is most likely in legacy environments running iTunes before 10.2 on Windows or old iOS versions covered by Apple’s 2011 advisories. Modern supported Apple platforms are unlikely to be affected, but the supplied data does not enumerate all fixed iOS versions. Prioritize remediation where legacy iTunes or iOS devices remain connected to business networks. The impact is serious, but broad urgency depends on whether these 2011-era affected products still exist in the environment. Mitigation focus: Upgrade iTunes on Windows to version 10.2 or later.; Apply the relevant Apple iOS security update from the cited Apple advisories.; Remove unsupported legacy Apple software where upgrades are not possible..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.