About the security content of Apple Software Update 2.2 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

CVE-2016-1731

The CVE-2016-1731 vulnerability affects Apple Software Update on Windows versions prior to 2.2. The issue arises because the update contents are retrieved over HTTP instead of HTTPS, enabling a man-in-the-middle to modify the data stream and spoof updates. Public sources in the provided documents...

About the security content of Apple Software Update 2.2

About the security content of Apple Software Update 2.2 This document describes the security content of Apple Software Update 2.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or...