Apple Software Update 2.2
Available for: Windows 7 and later
Impact: An attacker in a privileged network position may be able to control the contents of the updates window
Description: The contents of the updates window were retrieved from the network using an unprotected HTTP connection. This issue was addressed by using an encrypted HTTPS connection to retrieve the contents.
»
support.apple.com/en-us/HT206091