CVE-2024-54540

4.3 mediumEPSS 0.2%

Medium (4.3) in apple music. EPSS 0.2% chance of exploitation in the next 30 days.

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:music

References

https://support.apple.com/en-us/122043

Check your stack JSON