Apple iCloud Windows 10 version found sensitive information leakage vulnerability

Apple released the Windows version of iCloud 12.3 security update, which fixes the sensitive information leakage, cross-site scripting attack and other important vulnerabilities discovered in it.

The following are the details of the vulnerability:

Source: https://support.apple.com/zh-cn/HT212321

1. CVE-2021-1857 Severity: important

  • CFNetwork’s processing of maliciously crafted web content may reveal sensitive user information

2. CVE-2021-1811 Severity: important

  • CoreText’s processing of maliciously crafted fonts may cause process memory leaks

3. CVE-2021-1825 Severity: important

  • WebKit’s processing of maliciously crafted web content may lead to cross-site scripting attacks

4. CVE-2020-7463 Severity: important

  • WebRTC remote attackers may cause the system to terminate unexpectedly or corrupt kernel memory

Affected products and versions

  • The above vulnerabilities affect iCloud versions prior to 12.3 for Windows

Join Our Apple Channel On Telegram

Solution

  • Apple has released a security update. For Windows 10 users, you can use the Microsoft Store to download the iCloud 12.3 version update to fix it
  • For more vulnerability information and upgrades, please visit the official website:
  • https://support.apple.com/zh-cn/HT201222

If you like our news and you want to see such news even further, then follow RealMi Central on Telegram (RealMi Central, Xiaomi, Apple, Realme, RMC Gaming, Samsung, Microsoft, OnePlus, Huawei/Honor, Android 12), Twitter, Facebook (Page) (Group) & Instagram.

Leave a Comment