Kaspersky ID:
KLA12357
Дата обнаружения:
10/11/2021
Обновлено:
22/01/2024

Описание

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. A code execution vulnerability in ImageIO can be exploited via special crafted image to execute arbitrary code.
  2. A memory corruption vulnerability in WebKit can be exploited via special crafted web content to execute arbitrary code.
  3. A memory corruption vulnerability in ImageIO can be exploited via special crafted image to execute arbitrary code.
  4. A security bypass vulnerability in WebKit can be exploited to bypass security restrictions.
  5. A type confusion vulnerability in Foundation can be exploited via special crafted webpage to execute arbitrary code.
  6. A remote code execution vulnerability in CoreGraphics can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2021-30835
    high
  • CVE-2021-30849
    high
  • CVE-2021-30847
    high
  • CVE-2021-30814
    high
  • CVE-2021-30823
    warning
  • CVE-2021-30852
    high
  • CVE-2021-30928
    high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.