CVE-2020-36521 Out-of-bounds read is fixed in iOS 14.0, iCloud for Windows 11.4, iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9.

This issue is fixed in iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. A buffer overflow issue was addressed with additional validation. An attacker could leverage this vulnerability to execute arbitrary code on the system. This issue is fixed in iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. A race condition issue in the handling of connections with the web server was addressed. An attacker could potentially exploit this flaw to access information cross-origin. This issue is fixed in iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. A memory corruption issue was addressed with additional validation. An attacker could potentially exploit this flaw to execute arbitrary code on the system. This issue is fixed in iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. A memory corruption issue was addressed with additional validation. An attacker could potentially exploit this flaw to execute arbitrary code on the system. This issue is fixed in iCloud for Windows 11.4, iOS 14.0

iCloud for Windows 11.4, iOS 14.0

, watchOS 7.0, tvOS 14.0 and iTunes 12.10.9
This issue is fixed in iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9

iCloud for Windows 11.4

, iOS 14.0, watchOS 7.0, tvOS 14.0
A memory corruption issue was addressed with additional validation. An attacker could potentially exploit this flaw to execute arbitrary code on the system. This issue is fixed in iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9

iCloud for Windows: What is the problem?

On December 4, 2020, Apple released an update for iCloud for Windows. The vulnerability fixed in this update is CVE-2020-36521. This issue is fixed in iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. A buffer overflow issue was addressed with additional validation. An attacker could leverage this vulnerability to execute arbitrary code on the system.

Check for iCloud for Windows Updates iCloud for Windows 11.4, iOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9

Timeline

Published on: 09/23/2022 19:15:00 UTC
Last modified on: 09/27/2022 12:38:00 UTC

References

• https://support.apple.com/en-us/HT211847
• https://support.apple.com/en-us/HT211844
• https://support.apple.com/en-us/HT211843
• https://support.apple.com/en-us/HT211846
• https://support.apple.com/en-us/HT211850
• https://support.apple.com/en-us/HT211952
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-36521