KLA20116 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Security vulnerability in WebKit can be exploited to bypass security restrictions.
2. Out of bounds write vulnerability in ImageIO can be exploited to execute arbitrary code.
3. Information disclosure vulnerability in WebKit can be exploited to obtain sensitive information.

Original advisories

About the security content of iCloud for Windows 14.1

Related products

Apple-iCloud

CVE list

CVE-2022-46692 high

CVE-2022-46693 critical

CVE-2022-46698 high

Solution

Update to the latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Apple iCloud earlier than 14.1