KLA11456
Multiple vulnerabilities in Apple iCloud

Aktualisiert: 04/03/2019

Erkennungsdatum ?	03/25/2019
Schweregrad ?	Kritisch
Beschreibung	Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, obtain sensitive information, bypass security restrictions and gain privileges. Below is a complete list of vulnerabilities: A type confusion vulnerability in WebKit can be exploited remotely to execute arbitrary code; Multiple memory corruption vulnerabilities can be exploited remotely to execute arbitrary code; Multiple logic vulnerabilities in WebKit can be exploited remotely to perform cross-site scripting attack; A validation vulnerability in WebKit can be exploited remotely to obtain sensitive information; A memory corruption vulnerability can be exploited loccaly to bypass security restrictions; A buffer overflow vulnerability in CoreCrypto can be exploited locally to elevate privileges; A race condition vulnerability can be exploited locally to execute code execution; A cross-origin vulnerability in WebKit can be exploited locally to obtain sensitive information;
Beeinträchtigte Produkte	Apple iCloud earlier than 7.11
Lösung	Update to the latest version Download iCloud
Ursprüngliche Informationshinweise	HT209605
Folgen ?	ACE [?] OSI [?] PE [?]
	Link zum Original
	Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken

KLA11456Multiple vulnerabilities in Apple iCloud