Apple is all about Mac security updates this week. Earlier, the company dropped a bunch of security updates for MacOS Monterey, Big Sur and Catalina, followed by the first beta of 12.5. On Wednesday, Apple released another security update, but this time for Windows.
ITunes 12.12.4 is now available to users and can be downloaded from the Microsoft Store or Apple. These bugs that Apple patched in the update:
Apple Graphics Control
- For easy access: Windows 10 and later
- Impact: Processing a malicious image may result in arbitrary execution of the code
- Description: The problem of a memory corruption was solved with improved input validity.
- CVE-2022-26751: Michael Deplant (@izobashi) of Trend Micro Zero Day Initiative
ImageIO
- For easy access: Windows 10 and later
- Impact: A remote attacker may be able to terminate unexpected applications or perform arbitrary code
- Description: An integer overflow problem was solved with improved input validity.
- CVE-2022-26711: Blackson is working with the Hackers Club actae0n Trend Micro Zero Day Initiative
iTunes
- For easy access: Windows 10 and later
- Impact: A local invader may be able to improve their privileges
- Description: The problem of an argument with the management of the developed state was solved.
- CVE-2022-26774: Sai Win Mayat (@ 404 deaths)
Mobile device service
- For easy access: Windows 10 and later
- Impact: An application may be able to delete files for which it does not have permission
- Description: The problem of an argument with the management of the developed state was solved.
- CVE-2022-26773: Sai Win Mayat (@ 404 deaths)
Webkit
- For easy access: Windows 10 and later
- Impact: Processing malicious web content can lead to arbitrary code editing
- Description: A use was addressed after free problems with advanced memory management.
- Webkit Bagzilla: 238171
- CVE-2022-26717: Jionhun Shin of Theory
ITunes PC for Windows users can use Apple Music to access or buy music and videos if those users do not want to use the Apple Music website. The app is also used to sync content between a Windows PC and an iPhone, iPad or an iPod Touch.