Apple yesterday released a series of software updates that repaired vulnerabilities in iCloud for Windows 7.14 and 10.7, iTunes 12.10.1 for Windows and macOS Catalina 10.15.
The two iCloud updates fixed eight flaws in total, including an arbitrary code execution flaw in UI Foundation and five more in the WebKit browser engine, as well as two universal cross-site scripting bugs in WebKit.
The improvements to iTunes also fixed these same eight vulnerabilities, plus one additional code execution flaw in WebKit.
The changes to macOS Catalina have amended 16 bugs in the desktop operating system. Vulnerabilities were found in the following components: AMD, apace_mod_php, CoreAudio, Crash Reporter, Intel Graphics Driver, IOGraphics, Kernel, Notes, PDFKit, SharedFileList, sips, UI Foundation and WebKit.
Apple also issued security updates to Safari 13.0.2 for macOS Mojave 10.14.6 and macOS High Sierra 10.13.6. There were no published CVE entries for this update, however.
