KLA12006 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, bypass security restrictions, cause denial of service.

Below is a complete list of vulnerabilities:

1. An input validation vulnerability in WebKit can be exploited to perform cross-site scripting attacks.
2. A security bypass vulnerability in SQLite can be exploited to bypass security restrictions.
3. Denial of service vulnerability in SQLite can be exploited remotely to cause denial of service.
4. Denial of service vulnerability in ImageIO can be exploited to cause denial of service.

Original advisories

About the security content of iCloud for Windows 7.21

Related products

Apple-iCloud

CVE list

CVE-2020-9952 high

CVE-2020-15358 high

CVE-2020-9991 critical

CVE-2020-36521 high

Solution

Update to the latest version

Download iCloud

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• XSS/CSS

Cross site scripting. Exploitation of vulnerabilities with this impact can lead to partial interception of information transmitted between user and site.

Affected Products

• Apple iCloud earlier than 7.21