The Indian Computer Emergency Response Team (CERT-In) has issued a high severity warning in Apple iCloud for Windows that could allow an attacker to disclose sensitive information, execute arbitrary code or bypass security restrictions on the targeted system.
The reports stated that the vulnerabilities exist in Apple iCloud for Windows due to an out-of-bound write issue in ImageIO and logic issue in the Webkit component.
As per the report, only the users using Apple iCloud for Windows versions prior to 14.1 are affected. The vulnerabilities are: CVE-2022-46693, CVE-2022-46692, CVE-2022-46698, and an attacker could exploit these vulnerabilities by executing a specially crafted application.
Users are advised to regularly update their operating system to the latest version of Windows. In addition to updating the operating system, it is also recommended that users download the latest version of the iCloud for Windows app from the Microsoft store that can significantly reduce their risk of falling victim to security threats.
Discussion about this post