Yu Haiwan

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.1 watchOS versions prior to 5.1 Safari versions prior to 12.0.1 iTunes versions prior to 12.9.1 iCloud for Windows versions prior to 7.8 **Description** The issue is related to multiple memory corruption problems that were addressed with improved memory handling. **Recommendations** For iOS versions prior to 12.1, update to version 12.1 or later. For watchOS versions prior to 5.1, update to version 5.1 or later. For Safari versions prior to 12.0.1, update to version 12.0.1 or later. For iTunes versions prior to 12.9.1, update to version 12.9.1 or later. For iCloud for Windows versions prior to 7.8, update to version 7.8 or later.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012, and Windows Server 2012 R2 **Description** The issue is related to Internet Explorer improperly accessing objects in memory, which could allow an attacker to execute arbitrary code in the context of the current user. This can be exploited by a remote attacker to corrupt memory and execute arbitrary code. **Recommendations** For Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012, and Windows Server 2012 R2, update to a version that properly accesses objects in memory to prevent arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.