The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.
CVE ID: CVE-2024-54540
Vendor: Apple
Product: Apple Music for Windows
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.5% (scored less or equal to compared to others)
EPSS Date: 2025-02-13 (when was this score calculated)