Apple Icloud For Windows vulnerabilities

CVE-2019-8784 [HIGH] CWE-787 CVE-2019-8784: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges.

CVE-2018-4302 [HIGH] CWE-476 CVE-2018-4302: A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

CVE-2018-4398 [HIGH] CVE-2018-4398: iCloud for Windows 7.8 Apple Security Update: About the security content of iCloud for Windows 7.8 Product: iCloud for Windows Version: 7.8 CVE: CVE-2018-4398 Component: CoreCrypto Impact: An attacker may be able to exploit a weakness in the Miller-Rabin primality test to incorrectly identify prime numbers Description: An issue existed in the method for determining prime numbers. This issue was addressed by using pseudorandom bases for testing of primes.

CVE-2020-3864 [HIGH] CWE-346 CVE-2020-3864: A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17 A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.

CVE-2017-9049 [HIGH] CVE-2017-9049: iCloud for Windows 7.0 Apple Security Update: About the security content of iCloud for Windows 7.0 Product: iCloud for Windows Version: 7.0 CVE: CVE-2017-9049 Component: ImageIO Impact: Processing a maliciously crafted image may lead to a denial of service Description: An information disclosure issue existed in the processing of disk images. This issue was addressed through improved memory management.

CVE-2018-4311 [HIGH] CVE-2018-4311: iCloud for Windows 7.7 Apple Security Update: About the security content of iCloud for Windows 7.7 Product: iCloud for Windows Version: 7.7 CVE: CVE-2018-4311 Component: WebKit Impact: Cross-origin SecurityErrors includes the accessed frame’s origin Description: The issue was addressed by removing origin information.

CVE-2018-4126 [HIGH] CVE-2018-4126: iCloud for Windows 7.7 Apple Security Update: About the security content of iCloud for Windows 7.7 Product: iCloud for Windows Version: 7.7 CVE: CVE-2018-4126 Component: CFNetwork Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8848 [HIGH] CVE-2019-8848: iCloud for Windows 7.16 Apple Security Update: About the security content of iCloud for Windows 7.16 Product: iCloud for Windows Version: 7.16 CVE: CVE-2019-8848 Component: CFNetwork Proxies Impact: An application may be able to gain elevated privileges Description: This issue was addressed with improved checks.

CVE-2018-4474 [HIGH] CWE-400 CVE-2018-4474: A memory consumption issue was addressed with improved memory handling. This issue is fixed in iClou A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.

CVE-2020-9991 [HIGH] CVE-2020-9991: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service.

CVE-2019-6236 [HIGH] CWE-362 CVE-2019-6236: A race condition existed during the installation of iCloud for Windows. This was addressed with impr A race condition existed during the installation of iCloud for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iCloud installer in an untrusted directory may result in arbitrary code execution.

CVE-2019-6232 [HIGH] CWE-362 CVE-2019-6232: A race condition existed during the installation of iTunes for Windows. This was addressed with impr A race condition existed during the installation of iTunes for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iTunes installer in an untrusted directory may result in arbitrary code execution.

CVE-2017-13833 [HIGH] CVE-2017-13833: iCloud for Windows 7.0 Apple Security Update: About the security content of iCloud for Windows 7.0 Product: iCloud for Windows Version: 7.0 CVE: CVE-2017-13833 Component: CFNetwork Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2018-4412 [HIGH] CVE-2018-4412: iCloud for Windows 7.7 Apple Security Update: About the security content of iCloud for Windows 7.7 Product: iCloud for Windows Version: 7.7 CVE: CVE-2018-4412 Component: CoreFoundation Impact: A malicious application may be able to elevate privileges Description: A memory corruption issue was addressed with improved input validation.

CVE-2018-4414 [HIGH] CVE-2018-4414: iCloud for Windows 7.7 Apple Security Update: About the security content of iCloud for Windows 7.7 Product: iCloud for Windows Version: 7.7 CVE: CVE-2018-4414 Component: CoreFoundation Impact: An application may be able to gain elevated privileges Description: A memory corruption issue was addressed with improved input validation.

CVE-2016-4483 [HIGH] CVE-2016-4483: iCloud for Windows 5.2.1 Apple Security Update: About the security content of iCloud for Windows 5.2.1 Product: iCloud for Windows Version: 5.2.1 CVE: CVE-2016-4483 Component: About Apple security updates Impact: Multiple vulnerabilities in libxml2 Description: Multiple memory corruption issues were addressed through improved memory handling.

CVE-2021-30823 [MEDIUM] CVE-2021-30823: iCloud for Windows 13 Apple Security Update: About the security content of iCloud for Windows 13 Product: iCloud for Windows Version: 13 CVE: CVE-2021-30823 Component: WebKit Impact: An attacker in a privileged network position may be able to bypass HSTS Description: A logic issue was addressed with improved restrictions.

CVE-2019-8741 [HIGH] CWE-835 CVE-2019-8741: A denial of service issue was addressed with improved input validation. A denial of service issue was addressed with improved input validation.

CVE-2018-4347 [HIGH] CVE-2018-4347: iCloud for Windows 7.7 Apple Security Update: About the security content of iCloud for Windows 7.7 Product: iCloud for Windows Version: 7.7 CVE: CVE-2018-4347 Component: CoreText Impact: Processing a maliciously crafted text file may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management.

CVE-2016-1683 [HIGH] CVE-2016-1683: iCloud for Windows 5.2.1 Apple Security Update: About the security content of iCloud for Windows 5.2.1 Product: iCloud for Windows Version: 5.2.1 CVE: CVE-2016-1683 Component: About Apple security updates Impact: Multiple vulnerabilities in libxml2 Description: Multiple memory corruption issues were addressed through improved memory handling.