Apple Icloud For Windows vulnerabilities

CVE-2016-4743 [HIGH] CVE-2016-4743: iCloud for Windows 6.1 Apple Security Update: About the security content of iCloud for Windows 6.1 Product: iCloud for Windows Version: 6.1 CVE: CVE-2016-4743 Component: WebKit Impact: Processing maliciously crafted web content may result in the disclosure of process memory Description: A memory corruption issue was addressed through improved input validation.

CVE-2016-1836 [MEDIUM] CVE-2016-1836: iCloud for Windows 5.2.1 Apple Security Update: About the security content of iCloud for Windows 5.2.1 Product: iCloud for Windows Version: 5.2.1 CVE: CVE-2016-1836 Component: About Apple security updates Impact: Multiple vulnerabilities in libxml2 Description: Multiple memory corruption issues were addressed through improved memory handling.

CVE-2018-4309 [MEDIUM] CVE-2018-4309: iCloud for Windows 7.7 Apple Security Update: About the security content of iCloud for Windows 7.7 Product: iCloud for Windows Version: 7.7 CVE: CVE-2018-4309 Component: WebKit Impact: A malicious website may be able to execute scripts in the context of another website Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation.

CVE-2018-4345 [MEDIUM] CVE-2018-4345: iCloud for Windows 7.7 Apple Security Update: About the security content of iCloud for Windows 7.7 Product: iCloud for Windows Version: 7.7 CVE: CVE-2018-4345 Component: WebKit Impact: A malicious website may exfiltrate image data cross-origin Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation.

CVE-2018-4377 [MEDIUM] CVE-2018-4377: iCloud for Windows 7.8 Apple Security Update: About the security content of iCloud for Windows 7.8 Product: iCloud for Windows Version: 7.8 CVE: CVE-2018-4377 Component: Safari Reader Impact: Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation.

CVE-2018-4293 [MEDIUM] CVE-2018-4293: iCloud for Windows 7.6 Apple Security Update: About the security content of iCloud for Windows 7.6 Product: iCloud for Windows Version: 7.6 CVE: CVE-2018-4293 Component: CFNetwork Impact: Cookies may unexpectedly persist in Safari Description: A cookie management issue was addressed with improved checks.

CVE-2019-8764 [MEDIUM] CVE-2019-8764: iCloud for Windows 7.14 Apple Security Update: About the security content of iCloud for Windows 7.14 Product: iCloud for Windows Version: 7.14 CVE: CVE-2019-8764 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue was addressed with improved state management.

CVE-2017-7109 [MEDIUM] CVE-2017-7109: iCloud for Windows 7.0 Apple Security Update: About the security content of iCloud for Windows 7.0 Product: iCloud for Windows Version: 7.0 CVE: CVE-2017-7109 Component: WebKit Impact: Processing maliciously crafted web content may lead to a cross site scripting attack Description: Application Cache policy may be unexpectedly applied.

CVE-2017-13831 [HIGH] CVE-2017-13831: iCloud for Windows 7.0 Apple Security Update: About the security content of iCloud for Windows 7.0 Product: iCloud for Windows Version: 7.0 CVE: CVE-2017-13831 Component: ImageIO Impact: Processing a maliciously crafted image may lead to a denial of service Description: An information disclosure issue existed in the processing of disk images. This issue was addressed through improved memory management.

CVE-2019-8582 [MEDIUM] CVE-2019-8582: iCloud for Windows 7.12 Apple Security Update: About the security content of iCloud for Windows 7.12 Product: iCloud for Windows Version: 7.12 CVE: CVE-2019-8582 Component: CoreText Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2018-4224 [MEDIUM] CVE-2018-4224: iCloud for Windows 7.5 Apple Security Update: About the security content of iCloud for Windows 7.5 Product: iCloud for Windows Version: 7.5 CVE: CVE-2018-4224 Component: Security Impact: A local user may be able to read a persistent device identifier Description: An authorization issue was addressed with improved state management.

CVE-2018-4232 [MEDIUM] CVE-2018-4232: iCloud for Windows 7.5 Apple Security Update: About the security content of iCloud for Windows 7.5 Product: iCloud for Windows Version: 7.5 CVE: CVE-2018-4232 Component: WebKit Impact: Visiting a maliciously crafted website may lead to cookies being overwritten Description: A permissions issue existed in the handling of web browser cookies. This issue was addressed with improved restrictions.

CVE-2020-3885 [MEDIUM] CWE-670 CVE-2020-3885: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 1 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.

CVE-2019-8834 [MEDIUM] CVE-2019-8834: iCloud for Windows 10.9 Apple Security Update: About the security content of iCloud for Windows 10.9 Product: iCloud for Windows Version: 10.9 CVE: CVE-2019-8834 Component: CFNetwork Impact: An attacker in a privileged network position may be able to bypass HSTS for a limited number of specific top-level domains previously not in the HSTS preload list Description: A configuration issue was addressed with additional restrictions.

CVE-2018-4225 [MEDIUM] CVE-2018-4225: iCloud for Windows 7.5 Apple Security Update: About the security content of iCloud for Windows 7.5 Product: iCloud for Windows Version: 7.5 CVE: CVE-2018-4225 Component: Security Impact: A local user may be able to modify the state of the Keychain Description: An authorization issue was addressed with improved state management.

CVE-2018-4226 [MEDIUM] CVE-2018-4226: iCloud for Windows 7.5 Apple Security Update: About the security content of iCloud for Windows 7.5 Product: iCloud for Windows Version: 7.5 CVE: CVE-2018-4226 Component: Security Impact: A local user may be able to view sensitive user information Description: An authorization issue was addressed with improved state management.

CVE-2016-7592 [MEDIUM] CVE-2016-7592: iCloud for Windows 6.1 Apple Security Update: About the security content of iCloud for Windows 6.1 Product: iCloud for Windows Version: 6.1 CVE: CVE-2016-7592 Component: WebKit Impact: Processing maliciously crafted web content may compromise user information Description: An issue existed in handling of JavaScript prompts. This was addressed through improved state management.

CVE-2020-3887 [MEDIUM] CVE-2020-3887: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 1 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A download's origin may be incorrectly associated.

CVE-2020-15358 [MEDIUM] CVE-2020-15358: iCloud for Windows 7.21 Apple Security Update: About the security content of iCloud for Windows 7.21 Product: iCloud for Windows Version: 7.21 CVE: CVE-2020-15358 Component: CVE-2020-15358

CVE-2016-7614 [MEDIUM] CVE-2016-7614: iCloud for Windows 6.1 Apple Security Update: About the security content of iCloud for Windows 6.1 Product: iCloud for Windows Version: 6.1 CVE: CVE-2016-7614 Component: Windows Security Impact: A local user may be able to leak sensitive user information Description: The iCloud desktop client failed to clear sensitive information in memory. This issue was addressed through improved memory handling.