CVE-2016-1742

—

CVSS 3.0

7.8 high

EPSS

<1%p36

Published

May 20, 2016 (May 20, 2016)

Modified

Jun 17, 2026

Description

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Vendors: apple
Products: itunes
Weakness: CWE-264
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.