To get the update or updates that patch the issue, users need to install iTunes for Windows 12.10.1, iCloud for Windows 7.14 (Windows 7), or iCloud for Windows 10.7 (Windows 10).īack in early April, my 1709 version of Windows 10 Pro went unsupported and I finally allowed Windows Updates to upgrade to a new version. I uninstalled the original Apple Software Update using Control Panel and then installed this version directly without installing iTunes 10.12.1, and it seems to work afterwards. Then you can just run AppleSoftwareUpdate.msi to update Apple Software Update to version 2.6.3 which supposedly should fix the Apple Software Update vulnerability. Here’s an article on Apple Software Update for Windows just for those who need to know more about it.Īfter you downloaded the iTunes 10.12.1 installer, you can extract its contents by using a decompression program like 7-Zip.I recommend running these manually versus updating through Apple Software Update, just to be on the safe side. To get the update or updates that patch the issue, users need to install iTunes for Windows 12.10.1, iCloud for Windows 7.14 (Windows 7), or i Cloud for Windows 10.7 (Windows 10).

There doesn’t seem to be a separate update just to update Apple Software Update to a version that resolves the security vulnerability (in the past, Apple has released standalone updates for Apple Software Update for Windows.The vulnerability is with Apple’s particular software updater. That has been incorrectly stated in the news. It is correct that the security vulnerability is with Apple Software Update, not Bonjour for Windows.

I’ve done some digging into this, and here’s some additional info:

Update itunes windows 7