CVE-2013-0994: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code...

Security readout for executives and security teams

This old Apple iTunes issue could let a person intercepting network traffic crash iTunes or run code when iTunes Store browsing uses the vulnerable WebKit component. The source bundle points to iTunes before 11.0.3. No source here shows active exploitation or a CVSS score. Exposure is most likely on legacy endpoints still running Apple iTunes earlier than 11.0.3. Modern environments are unlikely to be exposed unless old software remains installed on managed or unmanaged systems. Treat this as a legacy hygiene issue unless old iTunes is still present. It is not KEV-listed, but arbitrary code execution under man-in-the-middle conditions warrants removal or upgrade of affected installations. Mitigation focus: Upgrade Apple iTunes to 11.0.3 or later where present.; Remove legacy iTunes installations that are no longer needed.; Prioritize remediation on laptops using untrusted or shared networks..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.