Multiple vulnerabilities in Apple iCloud

Description

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack.

Below is a complete list of vulnerabilities:

1. Multiple memory corruption vulnerabilities in SQLite can be exploited remotely to execute arbitrary code;
2. A type confusion vulnerability in WebKit can be exploited remotely to execute arbitrary code;
3. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely to execute arbitrary code;
4. A logic issue in WebKit can be exploited remotely to perform cross-site scripting attacks.

Original advisories

• About the security content of iCloud for Windows 7.10

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Apple-iCloud

CVE list

• CVE-2018-20346
  critical
• CVE-2018-20505
  critical
• CVE-2018-20506
  critical
• CVE-2019-6215
  critical
• CVE-2019-6212
  critical
• CVE-2019-6216
  critical
• CVE-2019-6217
  critical
• CVE-2019-6226
  critical
• CVE-2019-6227
  critical
• CVE-2019-6233
  critical
• CVE-2019-6234
  critical
• CVE-2019-6229
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com