KLA11965 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, cause denial of service.

Below is a complete list of vulnerabilities:

1. An input validation vulnerability in WebKit can be exploited to perform cross-site scripting attacks.
2. Denial of service vulnerability in ImageIO can be exploited to cause denial of service.
3. Denial of service vulnerability in SQLite can be exploited remotely to cause denial of service.

Original advisories

About the security content of iCloud for Windows 11.4

Related products

Apple-iCloud

CVE list

CVE-2020-9952 high

CVE-2020-9991 critical

CVE-2020-36521 high

Solution

Update to the latest version

Download iCloud

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• XSS/CSS

Cross site scripting. Exploitation of vulnerabilities with this impact can lead to partial interception of information transmitted between user and site.

Affected Products

• Apple iCloud earlier than 11.4