What is CVE-2019-6232?

CVE-2019-6232 is a high-severity vulnerability in Apple Icloud, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.5/10. Published 2019-12-18.

How severe is CVE-2019-6232?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Apple Icloud

CVE-2019-6232

A race condition existed during the installation of iTunes for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iTunes installer in an untrusted directory may result in arbitrary code execution.

Vulnerability class: Race Condition

EPSS: 0.012 (64.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Apple Icloud
Apple Icloud For Windows — versions unspecified

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

product-security@apple.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-6232?: CVE-2019-6232 is a high-severity vulnerability in Apple Icloud, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.5/10. Published 2019-12-18.
How severe is CVE-2019-6232?: High severity. CVSS v3 base score is 7.5 out of 10.