CVE-2017-13864
iTunes: An issue was discovered in certain Apple products.
CVE-2017-13864 is fixed in iTunes on 1 platform by iTunes 12.11.4.15 (version 12.11.4.15), released August 4, 2021. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.9
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0068
52nd percentile
An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the "APNs Server" component. It allows man-in-the-middle attackers to track users by leveraging mishandling of client certificates.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| iTunes | 12.11.4.15 | iTunes 12.11.4.15 | Aug 4, 2021 |