Apple Icloud For Windows vulnerabilities

CVE-2018-4263 [HIGH] CVE-2018-4263: iCloud for Windows 7.6 Apple Security Update: About the security content of iCloud for Windows 7.6 Product: iCloud for Windows Version: 7.6 CVE: CVE-2018-4263 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2018-4373 [HIGH] CVE-2018-4373: iCloud for Windows 7.8 Apple Security Update: About the security content of iCloud for Windows 7.8 Product: iCloud for Windows Version: 7.8 CVE: CVE-2018-4373 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2018-4284 [HIGH] CVE-2018-4284: iCloud for Windows 7.6 Apple Security Update: About the security content of iCloud for Windows 7.6 Product: iCloud for Windows Version: 7.6 CVE: CVE-2018-4284 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issue was addressed with improved memory handling.

CVE-2021-30785 [HIGH] CVE-2021-30785: iCloud for Windows 12.5 Apple Security Update: About the security content of iCloud for Windows 12.5 Product: iCloud for Windows Version: 12.5 CVE: CVE-2021-30785 Component: ImageIO Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: A buffer overflow was addressed with improved bounds checking.

CVE-2020-9873 [HIGH] CWE-125 CVE-2020-9873: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

CVE-2020-9938 [HIGH] CWE-125 CVE-2020-9938: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

CVE-2020-9984 [HIGH] CWE-125 CVE-2020-9984: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

CVE-2017-7090 [HIGH] CVE-2017-7090: iCloud for Windows 7.0 Apple Security Update: About the security content of iCloud for Windows 7.0 Product: iCloud for Windows Version: 7.0 CVE: CVE-2017-7090 Component: WebKit Impact: Cookies belonging to one origin may be sent to another origin Description: A permissions issue existed in the handling of web browser cookies. This issue was addressed by no longer returning cookies for custom URL schemes.

CVE-2022-46693 [HIGH] CWE-787 CVE-2022-46693: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tv An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing a maliciously crafted file may lead to arbitrary code execution.

CVE-2018-20505 [HIGH] CVE-2018-20505: iCloud for Windows 7.10 Apple Security Update: About the security content of iCloud for Windows 7.10 Product: iCloud for Windows Version: 7.10 CVE: CVE-2018-20505 Component: SQLite Impact: A maliciously crafted SQL query may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2018-4214 [HIGH] CVE-2018-4214: iCloud for Windows 7.5 Apple Security Update: About the security content of iCloud for Windows 7.5 Product: iCloud for Windows Version: 7.5 CVE: CVE-2018-4214 Component: WebKit Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: A memory corruption issue was addressed with improved input validation.

CVE-2018-4208 [HIGH] CVE-2018-4208: iCloud for Windows 7.4 Apple Security Update: About the security content of iCloud for Windows 7.4 Product: iCloud for Windows Version: 7.4 CVE: CVE-2018-4208 Component: WebKit Impact: Unexpected interaction causes an ASSERT failure Description: This issue was addressed with improved checks.

CVE-2018-4209 [HIGH] CVE-2018-4209: iCloud for Windows 7.4 Apple Security Update: About the security content of iCloud for Windows 7.4 Product: iCloud for Windows Version: 7.4 CVE: CVE-2018-4209 Component: WebKit Impact: Unexpected interaction causes an ASSERT failure Description: This issue was addressed with improved checks.

CVE-2018-4212 [HIGH] CVE-2018-4212: iCloud for Windows 7.4 Apple Security Update: About the security content of iCloud for Windows 7.4 Product: iCloud for Windows Version: 7.4 CVE: CVE-2018-4212 Component: WebKit Impact: Unexpected interaction causes an ASSERT failure Description: This issue was addressed with improved checks.

CVE-2018-4207 [HIGH] CVE-2018-4207: iCloud for Windows 7.4 Apple Security Update: About the security content of iCloud for Windows 7.4 Product: iCloud for Windows Version: 7.4 CVE: CVE-2018-4207 Component: WebKit Impact: Unexpected interaction causes an ASSERT failure Description: This issue was addressed with improved checks.

CVE-2018-4213 [HIGH] CVE-2018-4213: iCloud for Windows 7.4 Apple Security Update: About the security content of iCloud for Windows 7.4 Product: iCloud for Windows Version: 7.4 CVE: CVE-2018-4213 Component: WebKit Impact: Unexpected interaction causes an ASSERT failure Description: This issue was addressed with improved checks.

CVE-2018-4437 [HIGH] CVE-2018-4437: iCloud for Windows 7.9 Apple Security Update: About the security content of iCloud for Windows 7.9 Product: iCloud for Windows Version: 7.9 CVE: CVE-2018-4437 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2018-4464 [HIGH] CVE-2018-4464: iCloud for Windows 7.9 Apple Security Update: About the security content of iCloud for Windows 7.9 Product: iCloud for Windows Version: 7.9 CVE: CVE-2018-4464 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2018-4392 [HIGH] CVE-2018-4392: iCloud for Windows 7.8 Apple Security Update: About the security content of iCloud for Windows 7.8 Product: iCloud for Windows Version: 7.8 CVE: CVE-2018-4392 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2018-4144 [HIGH] CVE-2018-4144: iCloud for Windows 7.4 Apple Security Update: About the security content of iCloud for Windows 7.4 Product: iCloud for Windows Version: 7.4 CVE: CVE-2018-4144 Component: Security Impact: A malicious application may be able to elevate privileges Description: A buffer overflow was addressed with improved size validation.