Microsoft recently rolled out the new Apple iCloud update for Windows users. The update brings several new improvements like iCloud Photos integration within the Windows Photos app. However, the Indian Computer Emergency Response Team (CERT-IN) recently issued a warning for Apple iCloud for Windows. The government body has categorised this vulnerability as ‘high severity’ and has reported that the vulnerability can allow an attacker to disclose sensitive information, execute arbitrary code or bypass security restrictions on the targeted system.”
Who is affected
According to the report, users using Apple iCloud for Windows versions prior to 14.1 are affected by the newly found vulnerabilities.
What the government has said
As per the report, “Multiple vulnerabilities have been reported in Apple iCloud for Windows which could allow an attacker to disclose sensitive information, execute arbitrary code or bypass security restrictions on the targeted system”.
Here are the vulnerabilities found: CVE-2022-46693, CVE-2022-46692 and CVE-2022-46698.
Why do these vulnerabilities exist
According to CERT-In, these vulnerabilities exist in Apple iCloud for Windows due to “an out-of-bound write issue in ImageIO and logic issue in the WebKit component. An attacker could exploit these vulnerabilities by executing a specially crafted application.”
The government body has also clarified that successful exploitation of these issues can allow attackers to disclose sensitive information and also execute arbitrary code.
What’s the solution and how to update Apple iCloud for Windows
According to CERT-In, users using Apple iCloud for Windows should install the latest available update of the app right away.
Users can check for the latest update for iCloud for Windows by visiting Microsoft Store. Click on the Store icon and then search for iCloud. Here, check if there’s a pending update. If yes, click on the Update button to download and install the latest version of the app.
Who is affected
According to the report, users using Apple iCloud for Windows versions prior to 14.1 are affected by the newly found vulnerabilities.
What the government has said
As per the report, “Multiple vulnerabilities have been reported in Apple iCloud for Windows which could allow an attacker to disclose sensitive information, execute arbitrary code or bypass security restrictions on the targeted system”.
Here are the vulnerabilities found: CVE-2022-46693, CVE-2022-46692 and CVE-2022-46698.
Why do these vulnerabilities exist
According to CERT-In, these vulnerabilities exist in Apple iCloud for Windows due to “an out-of-bound write issue in ImageIO and logic issue in the WebKit component. An attacker could exploit these vulnerabilities by executing a specially crafted application.”
The government body has also clarified that successful exploitation of these issues can allow attackers to disclose sensitive information and also execute arbitrary code.
What’s the solution and how to update Apple iCloud for Windows
According to CERT-In, users using Apple iCloud for Windows should install the latest available update of the app right away.
Users can check for the latest update for iCloud for Windows by visiting Microsoft Store. Click on the Store icon and then search for iCloud. Here, check if there’s a pending update. If yes, click on the Update button to download and install the latest version of the app.
For all the latest Technology News Click Here
For the latest news and updates, follow us on Google News.
Denial of responsibility! TechNewsBoy.com is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.
