Apple Icloud For Windows vulnerabilities
445 known vulnerabilities affecting apple/icloud_for_windows.
Total CVEs
445
CISA KEV
1
actively exploited
Public exploits
66
Exploited in wild
2
Severity breakdown
CRITICAL20HIGH346MEDIUM77LOW2
Vulnerabilities
Page 5 of 23
CVE-2020-3885MEDIUMCVSS 4.3≥ unspecified, < iCloud for Windows 10.9.3≥ unspecified, < iCloud for Windows 7.182020-04-01
CVE-2020-3885 [MEDIUM] CWE-670 CVE-2020-3885: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 1
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.
nvd
CVE-2020-3894LOWCVSS 3.1≥ unspecified, < iCloud for Windows 10.9.3≥ unspecified, < iCloud for Windows 7.182020-04-01
CVE-2020-3894 [LOW] CWE-362 CVE-2020-3894: A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadO
A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory.
nvd
CVE-2019-8741HIGHCVSS 7.5≥ unspecified, < iCloud for Windows 10.7≥ unspecified, < iCloud for Windows 7.142020-02-28
CVE-2019-8741 [HIGH] CWE-835 CVE-2019-8741: A denial of service issue was addressed with improved input validation.
A denial of service issue was addressed with improved input validation.
nvdapple
CVE-2020-3825HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.172020-02-27
CVE-2020-3825 [HIGH] CWE-787 CVE-2020-3825: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2020-3878HIGHCVSS 7.8≥ unspecified, < iCloud for Windows 11.2≥ unspecified, < iCloud for Windows 7.192020-02-27
CVE-2020-3878 [HIGH] CWE-125 CVE-2020-3878: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2020-3868HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.172020-02-27
CVE-2020-3868 [HIGH] CWE-787 CVE-2020-3868: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2020-3865HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.172020-02-27
CVE-2020-3865 [HIGH] CWE-787 CVE-2020-3865: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd
CVE-2020-3826HIGHCVSS 7.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.172020-02-27
CVE-2020-3826 [HIGH] CWE-125 CVE-2020-3826: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing a maliciously crafted image may lead to arbitrary code execution.
nvd
CVE-2020-3846HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.172020-02-27
CVE-2020-3846 [HIGH] CWE-20 CVE-2020-3846: A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code executi
nvd
CVE-2020-3867MEDIUMCVSS 6.1≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.172020-02-27
CVE-2020-3867 [MEDIUM] CWE-79 CVE-2020-3867: A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iP
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.
nvd
CVE-2020-3862MEDIUMCVSS 6.5≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.172020-02-27
CVE-2020-3862 [MEDIUM] CVE-2020-3862: A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13
A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.
nvd
CVE-2019-8750CRITICALCVSS 9.8≥ unspecified, < iCloud for Windows 11.02019-12-18
CVE-2019-8750 [CRITICAL] CWE-787 CVE-2019-8750: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Multiple issues in libxslt.
nvdapple
CVE-2019-8600CRITICALCVSS 9.8≥ unspecified, < iCloud for Windows 7.122019-12-18
CVE-2019-8600 [CRITICAL] CWE-89 CVE-2019-8600: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 1
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.
nvdapple
CVE-2019-8710HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.02019-12-18
CVE-2019-8710 [HIGH] CWE-787 CVE-2019-8710: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8595HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 7.122019-12-18
CVE-2019-8595 [HIGH] CWE-787 CVE-2019-8595: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8726HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 10.7≥ unspecified, < iCloud for Windows 7.142019-12-18
CVE-2019-8726 [HIGH] CWE-787 CVE-2019-8726: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8672HIGHCVSS 8.8PoC≥ unspecified, < iCloud for Windows 7.13≥ unspecified, < iCloud for Windows 10.62019-12-18
CVE-2019-8672 [HIGH] CWE-787 CVE-2019-8672: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8819HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.152019-12-18
CVE-2019-8819 [HIGH] CWE-787 CVE-2019-8819: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8823HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.152019-12-18
CVE-2019-8823 [HIGH] CWE-787 CVE-2019-8823: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8815HIGHCVSS 8.8≥ unspecified, < iCloud for Windows 11.0≥ unspecified, < iCloud for Windows 7.152019-12-18
CVE-2019-8815 [HIGH] CWE-787 CVE-2019-8815: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple