Apple Icloud For Windows vulnerabilities

CVE-2018-4438 [HIGH] CVE-2018-4438: iCloud for Windows 7.9 Apple Security Update: About the security content of iCloud for Windows 7.9 Product: iCloud for Windows Version: 7.9 CVE: CVE-2018-4438 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A logic issue existed resulting in memory corruption. This was addressed with improved state management.

CVE-2017-13797 [HIGH] CVE-2017-13797: iCloud for Windows 7.1 Apple Security Update: About the security content of iCloud for Windows 7.1 Product: iCloud for Windows Version: 7.1 CVE: CVE-2017-13797 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2018-4382 [HIGH] CVE-2018-4382: iCloud for Windows 7.8 Apple Security Update: About the security content of iCloud for Windows 7.8 Product: iCloud for Windows Version: 7.8 CVE: CVE-2018-4382 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2017-7376 [CRITICAL] CVE-2017-7376: iCloud for Windows 7.0 Apple Security Update: About the security content of iCloud for Windows 7.0 Product: iCloud for Windows Version: 7.0 CVE: CVE-2017-7376 Component: ImageIO Impact: Processing a maliciously crafted image may lead to a denial of service Description: An information disclosure issue existed in the processing of disk images. This issue was addressed through improved memory management.

CVE-2017-2479 [MEDIUM] CVE-2017-2479: iCloud for Windows 6.2 Apple Security Update: About the security content of iCloud for Windows 6.2 Product: iCloud for Windows Version: 6.2 CVE: CVE-2017-2479 Component: WebKit Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: A validation issue existed in element handling. This issue was addressed through improved validation.

CVE-2017-7089 [MEDIUM] CVE-2017-7089: iCloud for Windows 7.0 Apple Security Update: About the security content of iCloud for Windows 7.0 Product: iCloud for Windows Version: 7.0 CVE: CVE-2017-7089 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue existed in the handling of parent-tab. This issue was addressed with improved state management.

CVE-2017-2480 [MEDIUM] CVE-2017-2480: iCloud for Windows 6.2 Apple Security Update: About the security content of iCloud for Windows 6.2 Product: iCloud for Windows Version: 6.2 CVE: CVE-2017-2480 Component: WebKit Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: A validation issue existed in element handling. This issue was addressed through improved validation.

CVE-2019-8600 [CRITICAL] CWE-89 CVE-2019-8600: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 1 A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.

CVE-2019-8649 [MEDIUM] CWE-79 CVE-2019-8649: A logic issue existed in the handling of synchronous page loads. This issue was addressed with impro A logic issue existed in the handling of synchronous page loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross sit

CVE-2019-8690 [MEDIUM] CWE-79 CVE-2019-8690: A logic issue existed in the handling of document loads. This issue was addressed with improved stat A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site script

CVE-2018-20346 [HIGH] CVE-2018-20346: iCloud for Windows 7.10 Apple Security Update: About the security content of iCloud for Windows 7.10 Product: iCloud for Windows Version: 7.10 CVE: CVE-2018-20346 Component: SQLite Impact: A maliciously crafted SQL query may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2020-9895 [CRITICAL] CWE-416 CVE-2020-9895: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

CVE-2018-20506 [HIGH] CVE-2018-20506: iCloud for Windows 7.10 Apple Security Update: About the security content of iCloud for Windows 7.10 Product: iCloud for Windows Version: 7.10 CVE: CVE-2018-20506 Component: SQLite Impact: A maliciously crafted SQL query may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2020-3895 [HIGH] CWE-787 CVE-2020-3895: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2019-8746 [CRITICAL] CVE-2019-8746: iCloud for Windows 10.7 Apple Security Update: About the security content of iCloud for Windows 10.7 Product: iCloud for Windows Version: 10.7 CVE: CVE-2019-8746 Component: Foundation Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation.

CVE-2020-3909 [CRITICAL] CWE-120 CVE-2020-3909: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and i A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.

CVE-2019-8601 [HIGH] CWE-190 CVE-2019-8601: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2019-8844 [HIGH] CWE-787 CVE-2019-8844: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2020-3900 [HIGH] CWE-787 CVE-2020-3900: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2017-7064 [MEDIUM] CVE-2017-7064: iCloud for Windows 6.2.2 Apple Security Update: About the security content of iCloud for Windows 6.2.2 Product: iCloud for Windows Version: 6.2.2 CVE: CVE-2017-7064 Component: WebKit Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling.