Multiple vulnerabilities in Apple iCloud

Description

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, bypass security restrictions, cause denial of service.

Below is a complete list of vulnerabilities:

1. An input validation vulnerability in WebKit can be exploited to perform cross-site scripting attacks.
2. A security bypass vulnerability in SQLite can be exploited to bypass security restrictions.
3. Denial of service vulnerability in SQLite can be exploited remotely to cause denial of service.
4. Denial of service vulnerability in ImageIO can be exploited to cause denial of service.

Original advisories

• About the security content of iCloud for Windows 7.21

Related products

• Apple-iCloud

CVE list

• CVE-2020-9952
  high
• CVE-2020-15358
  high
• CVE-2020-9991
  critical
• CVE-2020-36521
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com