Apple Music vulnerabilities
8 vulnerabilities
Known vulnerabilities in Apple Music, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-46841appleapple music for android+1
EPSS score0.47%
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.CVE-2020-9982appleapple music for android+1EPSS score0.76%
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application may be able to leak a user's credentials.CVE-2022-32836appleapple music for android+1EPSS score0.55%
This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.CVE-2022-32906appleapple music for android+1EPSS score0.36%
This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.9.10 for Android. A user in a privileged network position may intercept SSL/TLS connections.CVE-2022-32846appleapple music for android+1EPSS score0.62%
A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.CVE-2024-54540appleapple_music+1EPSS score0.21%
The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.CVE-2023-28203appleapple music for android+1EPSS score0.20%
The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts.CVE-2023-32427appleapple music for android+1EPSS score0.43%
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic.