CVE-2019-6236 — Race Condition in Apple Icloud FOR Windows

CWE-362 — Race Condition4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 35.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Icloud FOR WindowsApple Icloud
Timeline
PublishedDec 18
Latest updateMay 24

Description

A race condition existed during the installation of iCloud for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iCloud installer in an untrusted directory may result in arbitrary code execution.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5apple/icloud_for_windowsunspecified — iCloud for Windows 7.11
▶NVDapple/icloud< 7.11

🔴Vulnerability Details

2
GHSA
GHSA-7396-5hfj-hqx5: A race condition existed during the installation of iCloud for Windows↗2022-05-24
▶
CVEList
CVE-2019-6236: A race condition existed during the installation of iCloud for Windows↗2019-12-18
▶

📋Vendor Advisories

1
Apple
CVE-2019-6236: iCloud for Windows 7.11↗2019-03-25
▶
CVE-2019-6236 — Race Condition in Apple | cvebase