WebKit suffers from a cross site scripting vulnerability via a synchronous page load.
92735631e0e061d11a4e9bee27724d113f8e61007a2e2baf066275e4b780138e
Apple Security Advisory 2017-03-28-2 - This advisory provides additional information for APPLE-SA-2017-03-22-1. iTunes for Windows 12.6 addresses multiple vulnerabilities in various included software.
5e917bb7e6f9edc636297d6a5ef7728eaba569232b19fbb441916d312716221a
Apple Security Advisory 2017-03-28-1 - iCloud for Windows 6.2 is now available and addresses information disclosure, memory corruption, and various other vulnerabilities.
41c78bd843877663508f8fd5d2e712c16049e0e80c8f87fb341a44fd9ae1a3ed