CVE-2016-7614
published 2017-02-20CVE-2016-7614: An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to…
PriorityP421medium5.5CVSS 3.0
AVLACLPRLUINSUCHINAN
EPSS
0.30%
22.5th percentile
An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | icloud | <= 6.0.1 | — |
| apple | icloud_for_windows | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2016-7614: iCloud for Windows 6.1
vendor_apple·2016-12-13·CVSS 5.5
CVE-2016-7614 [MEDIUM] CVE-2016-7614: iCloud for Windows 6.1
Apple Security Update: About the security content of iCloud for Windows 6.1
Product: iCloud for Windows
Version: 6.1
CVE: CVE-2016-7614
Component: Windows Security
Impact: A local user may be able to leak sensitive user information
Description: The iCloud desktop client failed to clear sensitive information in memory. This issue was addressed through improved memory handling.
GHSA
GHSA-fhg8-mpcc-89jr: An issue was discovered in certain Apple products
ghsa_unreviewed·2022-05-17
CVE-2016-7614 [MEDIUM] CWE-200 GHSA-fhg8-mpcc-89jr: An issue was discovered in certain Apple products
An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-02-20
Published