Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32417 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-02-13T16:50:59.716Z Vendors: Apple Products: watchOS Problem Types: An attacker with physical access to a locked Apple Watch may be able to view user photos or contacts via accessibility features Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 9.5. An attacker with physical access to a locked Apple Watch may be able to view user photos or contacts via accessibility features. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213764 - https://support.apple.
gram Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213764 - https://support.apple.com/kb/HT213758
CVE ID: CVE-2023-32418 State: PUBLISHED Published: 2023-07-27T00:31:36.227Z Last Updated: 2024-10-23T13:48:12.437Z Vendors: Apple Products: macOS Problem Types: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844
CVE ID: CVE-2023-32419 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-04T14:47:55.547Z Vendors: Apple Products: iOS and iPadOS Problem Types: A remote attacker may be able to cause arbitrary code execution Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.5 and iPadOS 16.5. A remote attacker may be able to cause arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213757
CVE ID: CVE-2023-32420 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-04T14:47:18.790Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS, tvOS Problem Types: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to cause unexpected system termination or read kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - ht
ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761
CVE ID: CVE-2023-32421 State: PUBLISHED Published: 2023-09-26T20:12:02.556Z Last Updated: 2025-11-04T19:16:18.023Z Vendors: Apple Products: macOS Problem Types: An app may be able to observe unprotected user data Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to observe unprotected user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-32422 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-02-13T16:51:00.916Z Vendors: Apple Products: macOS, iOS and iPadOS, tvOS Problem Types: An app may be able to bypass Privacy preferences Description: This issue was addressed by adding additional SQLite logging restrictions. This issue is fixed in iOS 16.5 and iPadOS 16.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761 - https://support.apple.com/kb/HT
- https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761 - https://support.apple.com/kb/HT213764 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845
CVE ID: CVE-2023-32423 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-04T14:44:43.593Z Vendors: Apple Products: macOS, Safari, watchOS, iOS and iPadOS, tvOS Problem Types: Processing web content may disclose sensitive information Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213762 - https://support.apple.co
rences: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213762 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761
CVE ID: CVE-2023-32424 State: PUBLISHED Published: 2024-01-10T22:03:32.902Z Last Updated: 2025-06-03T14:26:48.164Z Vendors: Apple Products: iOS and iPadOS, watchOS Problem Types: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4, watchOS 9.4. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678
CVE ID: CVE-2023-32425 State: PUBLISHED Published: 2023-09-06T01:36:33.219Z Last Updated: 2025-02-13T16:51:01.444Z Vendors: Apple Products: watchOS, iOS and iPadOS Problem Types: An app may be able to gain elevated privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/kb/HT213757 - https://support.apple.com/kb/HT213764
CVE ID: CVE-2023-32426 State: PUBLISHED Published: 2023-09-06T01:36:31.226Z Last Updated: 2025-02-13T16:51:02.138Z Vendors: Apple Products: macOS Problem Types: An app may be able to gain root privileges Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to gain root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/kb/HT213670
CVE ID: CVE-2023-32427 State: PUBLISHED Published: 2023-07-28T04:30:39.602Z Last Updated: 2024-10-22T18:21:35.693Z Vendors: Apple Products: Apple Music for Android Problem Types: An attacker in a privileged network position may be able to intercept network traffic Description: This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213833
CVE ID: CVE-2023-32428 State: PUBLISHED Published: 2023-09-06T01:36:35.186Z Last Updated: 2025-02-13T16:54:44.720Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS, tvOS Problem Types: An app may be able to gain root privileges Description: This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761 -
support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761 - https://support.apple.com/kb/HT213757 - https://support.apple.com/kb/HT213761 - https://support.apple.com/kb/HT213764 - https://support.apple.com/kb/HT213758
CVE ID: CVE-2023-32429 State: PUBLISHED Published: 2023-07-27T00:30:59.969Z Last Updated: 2025-02-13T16:54:45.294Z Vendors: Apple Products: macOS Problem Types: An app may be able to bypass Privacy preferences Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845
CVE ID: CVE-2023-32432 State: PUBLISHED Published: 2023-09-06T01:36:36.603Z Last Updated: 2025-02-13T16:54:45.943Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS, tvOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://sup
e.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761 - https://support.apple.com/kb/HT213757 - https://support.apple.com/kb/HT213761 - https://support.apple.com/kb/HT213764 - https://support.apple.com/kb/HT213758
CVE ID: CVE-2023-32433 State: PUBLISHED Published: 2023-07-26T23:49:10.513Z Last Updated: 2024-10-23T14:41:58.983Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-u
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/en-us/HT213848
CVE ID: CVE-2023-32434 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-10-21T23:05:44.647Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Description: An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel pri
8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213810 - https://support.apple.com/en-us/HT213811 - https://support.apple.com/en-us/HT213814 - https://support.apple.com/en-us/HT213808 - https://support.apple.com/en-us/HT213812 - https://support.apple.com/en-us/HT213813 - https://support.apple.com/en-us/HT213809 - https://support.apple.com/kb/HT213990 - http://seclist
e.com/en-us/HT213813 - https://support.apple.com/en-us/HT213809 - https://support.apple.com/kb/HT213990 - http://seclists.org/fulldisclosure/2023/Oct/20
CVE ID: CVE-2023-32435 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-10-21T23:05:44.502Z Vendors: Apple Products: macOS, iOS and iPadOS, Safari Problem Types: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively expl
web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213811 - https://support.apple.com/en-us/HT213671 - https://support.apple.com/en-us/HT213676
CVE ID: CVE-2023-32436 State: PUBLISHED Published: 2024-01-10T22:03:17.732Z Last Updated: 2025-06-20T15:38:29.806Z Vendors: Apple Products: macOS Problem Types: An app may be able to cause unexpected system termination or write kernel memory Description: The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-32437 State: PUBLISHED Published: 2023-07-26T23:55:04.827Z Last Updated: 2025-02-13T16:54:47.081Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to break out of its sandbox Description: The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213841 - https://support.apple.com/kb/HT213757 - https://support.apple.com/kb/HT213761 - https://support.apple.com/kb/HT213764 - https://support.apple.com/kb/HT213758
CVE ID: CVE-2023-32438 State: PUBLISHED Published: 2023-09-06T01:36:41.501Z Last Updated: 2024-09-26T20:24:49.326Z Vendors: Apple Products: iOS and iPadOS, tvOS, macOS, watchOS Problem Types: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS 16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213606 - https://support.apple.com/en-us/HT213601 - https://support.apple.com/en-us/HT213605 - https
t.apple.com/en-us/HT213606 - https://support.apple.com/en-us/HT213601 - https://support.apple.com/en-us/HT213605 - https://support.apple.com/en-us/HT213599
CVE ID: CVE-2023-32439 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-10-21T23:05:44.317Z Vendors: Apple Products: iOS and iPadOS, Safari, macOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Additio
y lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213811 - https://support.apple.com/en-us/HT213816 - https://support.apple.com/en-us/HT213814 - https://support.apple.com/en-us/HT213813 - https://support.apple.com/kb/HT213814 - https://support.apple.com/kb/HT213816 - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-32441 State: PUBLISHED Published: 2023-07-27T00:22:15.227Z Last Updated: 2024-10-23T14:00:48.028Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213846 - ht
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/en-us/HT213848
CVE ID: CVE-2023-32442 State: PUBLISHED Published: 2023-07-27T00:31:16.306Z Last Updated: 2024-10-22T20:34:10.696Z Vendors: Apple Products: macOS Problem Types: A shortcut may be able to modify sensitive Shortcuts app settings Description: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. A shortcut may be able to modify sensitive Shortcuts app settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213844
CVE ID: CVE-2023-32443 State: PUBLISHED Published: 2023-07-27T00:31:43.140Z Last Updated: 2024-10-23T13:37:51.047Z Vendors: Apple Products: macOS Problem Types: Processing a file may lead to a denial-of-service or potentially disclose memory contents Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to a denial-of-service or potentially disclose memory contents. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://suppo
hment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844
CVE ID: CVE-2023-32444 State: PUBLISHED Published: 2023-07-28T04:30:40.978Z Last Updated: 2025-02-13T16:54:48.168Z Vendors: Apple Products: macOS Problem Types: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/kb/H
3 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845
CVE ID: CVE-2023-32445 State: PUBLISHED Published: 2023-07-28T04:30:41.914Z Last Updated: 2024-10-22T18:17:07.625Z Vendors: Apple Products: Safari, tvOS, iOS and iPadOS, macOS, watchOS Problem Types: Processing a document may lead to a cross site scripting attack Description: This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 -
SA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213848
CVE ID: CVE-2023-32446 State: PUBLISHED Published: 2023-07-20T12:50:47.946Z Last Updated: 2024-10-17T14:12:16.678Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse Proprietary OS (Modern ThinOS) Problem Types: CWE-312 Description: Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-24
Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247
CVE ID: CVE-2023-32447 State: PUBLISHED Published: 2023-07-20T12:55:50.405Z Last Updated: 2024-10-17T13:02:34.609Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Wyse Proprietary OS (Modern ThinOS) Problem Types: CWE-312 Description: Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000215864/dsa-2023-247
CVE ID: CVE-2023-32448 State: PUBLISHED Published: 2023-05-30T15:29:19.013Z Last Updated: 2025-01-10T16:37:06.150Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: PowerPath Windows Problem Types: CWE-312 Description: PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the installation directory can retrieve the license key of the product and use it to install and license PowerPath on different systems. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000214248/dsa-2023-154-powerpath-wi
ner: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000214248/dsa-2023-154-powerpath-windows-security-update-for-security-update-for-multiple-vulnerabilities