Apple Music vulnerabilities

2 vulnerabilities

Known vulnerabilities in Apple Music, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2017-2387appleapple_music
EPSS score
0.23%
The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.5.5CVE-2024-54540appleapple_music+1
EPSS score
0.21%
The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.