CVE-2021-1811: vulnerability in Apple iCloud for Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.7%
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted font may result in the disclosure of process memory.
Affected products
Apple · iCloud for WindowsApple · iOS and iPadOSApple · iTunes for WindowsApple · macOSApple · tvOSApple · watchOSRelated CVEs — Apple iCloud for Windows
In the same product, most dangerous first.
References
https://support.apple.com/en-us/HT212317https://support.apple.com/en-us/HT212319https://support.apple.com/en-us/HT212321https://support.apple.com/en-us/HT212323https://support.apple.com/en-us/HT212324https://support.apple.com/en-us/HT212325https://support.apple.com/en-us/HT212326https://support.apple.com/en-us/HT212327