CVE-2013-0999: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code...

Security readout for executives and security teams

This is an old Apple iTunes WebKit flaw affecting iTunes before 11.0.3. A network attacker positioned between the user and iTunes Store browsing could potentially run code or crash the application. Business urgency depends on whether legacy iTunes installations remain in use. Exposure is mainly legacy endpoints still running Apple iTunes before 11.0.3. Risk is higher on untrusted or interceptable networks where iTunes Store browsing is possible. Current managed fleets are less likely exposed unless obsolete software persists. Prioritize remediation if legacy iTunes exists on business endpoints, especially laptops using untrusted networks. If inventory confirms no iTunes before 11.0.3, this should be tracked as historical hygiene rather than an urgent incident. Mitigation focus: Upgrade Apple iTunes to 11.0.3 or later where applicable.; Remove unsupported legacy iTunes installations from managed endpoints.; Restrict iTunes Store browsing on systems that cannot be updated..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.