For general advice see Troubleshooting issues with iTunes for Windows updates.
Get Apple iPad Pro 12.9' (4th Generation) support for the topic: Back up, Sync & Transfer Content (iTunes). Find more step-by-step device tutorials on att.com.
- It is said that iTunes 12.9 has released by Apple, but I couldn't find where to download it, does anyone give a link? Some days ago, I downloaded iOS12 to my iPhone6Plus so that iTunes can't sync music to iphone, then upgraded my Mac mini from Mavericks to El Capitan and jope to installed iTunes 12.9 to sync music.
- So this tutorial shows you where to download the iTunes old version for Mac & Windows and also the solution to completely uninstall iTunes on Windows 10/8/7 correctly. (Note: There is no iTunes desktop app for macOS 10.15 Catalina and later).
- Introducing the new iMac, iPad Pro, iPhone 12 in purple, AirTag, and Apple TV 4K.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. When reinstalling right click on the downloaded setup file and use run as administrator. It may also help to temporarily disable any non-Microsoft anti-virus.
Review the other boxes and the list of support documents further down the page in case one of them applies.
The further information area has direct links to the current and recent builds in case you have problems downloading, or want to revert to an older version if the current one won't work properly for you at the moment.
Your library and device backups should be unaffected by these steps but there are links to backup and recovery advice should it be needed.
tt2
Oct 2, 2018 1:44 PM
About Apple security updates
For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.
Apple security documents reference vulnerabilities by CVE-ID when possible.
For more information about security, see the Apple Product Security page.
iTunes 12.9.4 for Windows
Released March 25, 2019
CoreCrypto
Available for: Windows 7 and later
Impact: A malicious application may be able to elevate privileges
Description: A buffer overflow was addressed with improved bounds checking.
CVE-2019-8542: an anonymous researcher
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
CVE-2019-6201: dwfault working with ADLab of Venustech
CVE-2019-8518: Samuel Groß of Google Project Zero
CVE-2019-8523: Apple
CVE-2019-8524: G. Geshev working with Trend Micro Zero Day Initiative
CVE-2019-8558: Samuel Groß of Google Project Zero
CVE-2019-8559: Apple
CVE-2019-8563: Apple
CVE-2019-8638: found by OSS-Fuzz
CVE-2019-8639: found by OSS-Fuzz
Entry added June 24, 2019
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A type confusion issue was addressed with improved memory handling.
CVE-2019-8506: Samuel Groß of Google Project Zero
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A memory corruption issue was addressed with improved state management.
CVE-2019-8535: Zhiyang Zeng (@Wester) of Tencent Blade Team
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: Multiple memory corruption issues were addressed with improved memory handling.
CVE-2019-6201: dwfault working with ADLab of Venustech
CVE-2019-8518: Samuel Groß of Google Project Zero
CVE-2019-8523: Apple
CVE-2019-8524: G. Geshev working with Trend Micro Zero Day Initiative
CVE-2019-8558: Samuel Groß of Google Project Zero
CVE-2019-8559: Apple
CVE-2019-8563: Apple
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may disclose sensitive user information
Description: A cross-origin issue existed with the fetch API. This was addressed with improved input validation.
CVE-2019-8515: James Lee (@Windowsrcer)
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A memory corruption issue was addressed with improved memory handling.
CVE-2019-8536: Apple
CVE-2019-8544: an anonymous researcher
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution
Description: A use after free issue was addressed with improved memory management.
CVE-2019-7285: dwfault working at ADLab of Venustech
CVE-2019-8556: Apple
WebKit
Itunes 12.9 System Requirements Mac
Available for: Windows 7 and later
Impact: A malicious website may be able to execute scripts in the context of another website
Description: A logic issue was addressed with improved validation.
CVE-2019-8503: Linus Särud of Detectify
WebKit
Available for: Windows 7 and later
Impact: A sandboxed process may be able to circumvent sandbox restrictions
Description: A memory corruption issue was addressed with improved validation.
CVE-2019-8562: Wen Xu of SSLab at Georgia Tech and Hanqing Zhao of Chaitin Security Research Lab
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may result in the disclosure of process memory
Description: A validation issue was addressed with improved logic.
CVE-2019-7292: Zhunki and Zhiyi Zhang of 360 ESG Codesafe Team
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to universal cross site scripting
Description: A logic issue was addressed with improved validation.
CVE-2019-8551: Ryan Pickren (ryanpickren.com)
Additional recognition
Itunes 12.9 For Mac
Safari
We would like to acknowledge Nikhil Mittal (@c0d3G33k) of Payatu Labs (payatu.com), Ryan Pickren (ryanpickren.com) for their assistance.
Entry updated June 24, 2019
WebKit
We would like to acknowledge Andrey Kovalev of Yandex Security Team for their assistance.