Apple Icloud For Windows vulnerabilities

181 known vulnerabilities affecting apple/icloud_for_windows.

Total CVEs
181
CISA KEV
1
actively exploited
Public exploits
14
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH141MEDIUM32LOW1

Vulnerabilities

Page 3 of 10
CVE-2020-9936HIGHCVSS 7.8≥ unspecified, < iCloud for Windows 11.3≥ unspecified, < iCloud for Windows 7.202020-10-16
CVE-2020-9936 [HIGH] CWE-787 CVE-2020-9936: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-9952HIGHCVSS 7.1≥ unspecified, < iCloud for Windows 11.4≥ unspecified, < iCloud for Windows 7.212020-10-16
CVE-2020-9952 [HIGH] CWE-79 CVE-2020-9952: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 1 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.
cvelistv5nvd
CVE-2020-9910HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.3≥ unspecified, < iCloud for Windows 7.202020-10-16
CVE-2020-9910 [HIGH] CVE-2020-9910: Multiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, Multiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
cvelistv5nvd
CVE-2020-9893HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.3≥ unspecified, < iCloud for Windows 7.202020-10-16
CVE-2020-9893 [HIGH] CWE-416 CVE-2020-9893: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
cvelistv5nvd
CVE-2020-9916MEDIUMCVSS 5.3≥ unspecified, < iCloud for Windows 11.3≥ unspecified, < iCloud for Windows 7.202020-10-16
CVE-2020-9916 [MEDIUM] CVE-2020-9916: A URL Unicode encoding issue was addressed with improved state management. This issue is fixed in iO A URL Unicode encoding issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker may be able to conceal the destination of a URL.
cvelistv5nvd
CVE-2020-9894MEDIUMCVSS 4.3≥ unspecified, < iCloud for Windows 11.3≥ unspecified, < iCloud for Windows 7.202020-10-16
CVE-2020-9894 [MEDIUM] CWE-125 CVE-2020-9894: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
cvelistv5nvd
CVE-2020-9925MEDIUMCVSS 6.1≥ unspecified, < iCloud for Windows 11.3≥ unspecified, < iCloud for Windows 7.202020-10-16
CVE-2020-9925 [MEDIUM] CWE-79 CVE-2020-9925: A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPad A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.
cvelistv5nvd
CVE-2020-9915MEDIUMCVSS 6.5≥ unspecified, < iCloud for Windows 11.3≥ unspecified, < iCloud for Windows 7.202020-10-16
CVE-2020-9915 [MEDIUM] CVE-2020-9915: An access issue existed in Content Security Policy. This issue was addressed with improved access re An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may prevent Content Security Policy
cvelistv5nvd
CVE-2020-9850CRITICALCVSS 9.8PoC≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9850 [CRITICAL] CVE-2020-9850: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 1 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution.
cvelistv5nvd
CVE-2020-9803HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9803 [HIGH] CWE-20 CVE-2020-9803: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 an A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-9794HIGHCVSS 8.1≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9794 [HIGH] CWE-125 CVE-2020-9794: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 a An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A malicious application may cause a denial of service or potentially disclose memory contents.
cvelistv5nvd
CVE-2020-9843HIGHCVSS 7.1≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9843 [HIGH] CWE-79 CVE-2020-9843: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 1 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack.
cvelistv5nvd
CVE-2020-9806HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9806 [HIGH] CWE-787 CVE-2020-9806: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1 A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-9807HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9807 [HIGH] CWE-787 CVE-2020-9807: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1 A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-9802HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9802 [HIGH] CVE-2020-9802: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 1 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-9805HIGHCVSS 7.1≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9805 [HIGH] CWE-79 CVE-2020-9805: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 1 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.
cvelistv5nvd
CVE-2020-9790HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9790 [HIGH] CWE-787 CVE-2020-9790: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-9800HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9800 [HIGH] CWE-843 CVE-2020-9800: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-9789HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-06-09
CVE-2020-9789 [HIGH] CWE-787 CVE-2020-9789: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
cvelistv5nvd
CVE-2020-3911CRITICALCVSS 9.8≥ unspecified, < iCloud for Windows 10.9.3≥ unspecified, < iCloud for Windows 7.182020-04-01
CVE-2020-3911 [CRITICAL] CWE-120 CVE-2020-3911: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and i A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
cvelistv5nvd
← Previous3 / 10Next →