Apple is working on new Music, TV, and Devices apps to replace the outdated iTunes for Windows, but in the meantime, you should make sure iTunes is up to date on your computer. A new security flaw could cause serious damage if you don't have the latest version.
Apple has released iTunes 12.12.9 for Windows, which contains fixes for two reported security vulnerabilities. The first, CVE-2023-32353, allowed third-party software to gain a privileged system shell by using a folder that iTunes creates during the installation process. The flaw was discovered by a security consultant at Synopsys.
Synopsys said in a post, “the iTunes application creates a folder, SC Info, in the [iTunes directory] as the SYSTEM user and gives full control of that directory to all users. After installation, the first user to run the iTunes application can delete the SC Info folder, create a link to the system folder , and recreate the folder by forcing an MSI repair, which can later be used to gain Windows SYSTEM level access.”
The iTunes update also includes a patch for CVE-2023-32351, a separate issue that allowed other software to gain elevated privileges through iTunes. It's unclear whether either vulnerability has been exploited by hackers so far.
iTunes 12.12.9 is available for download from the Apple website and the Microsoft Store. It requires Windows 10 or later — support for Windows 8, 7, and earlier versions recently ended.
Information source: howtogeek.com
