CVE-2016-7614 — Sensitive Information Exposure in Apple Icloud

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 81.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple IcloudApple Icloud FOR Windows
Timeline
PublishedFeb 20
Latest updateMay 17

Description

An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDapple/icloud6.0.1

🔴Vulnerability Details

1
GHSA
GHSA-fhg8-mpcc-89jr: An issue was discovered in certain Apple products↗2022-05-17
▶

📋Vendor Advisories

1
Apple
CVE-2016-7614: iCloud for Windows 6.1↗2016-12-13
▶
CVE-2016-7614 — Sensitive Information Exposure in Apple | cvebase