Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
plugin/wordpress-console/vulnerability/wordpress-wordpress-console-plugin-0-3-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-28169 State: PUBLISHED Published: 2023-05-08T12:22:32.644Z Last Updated: 2025-01-09T15:25:17.707Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: CoreFortress Products: Easy Event calendar Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CoreFortress Easy Event calendar plugin <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-event-calendar/wordpress-easy-event-calendar-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-28170 State: PUBLISHED Published: 2023-12-20T19:12:26.012Z Last Updated: 2024-08-02T12:30:24.280Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Themely Products: Theme Demo Import Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Themely Theme Demo Import.This issue affects Theme Demo Import: from n/a through 1.1.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/theme-demo-import/wordpress-theme-demo-import-plugin-1-1-1-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-28171 State: PUBLISHED Published: 2023-06-22T08:01:10.364Z Last Updated: 2024-10-10T17:26:44.810Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: WP Chill Products: Brilliance Problem Types: CWE-79 Description: Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Chill Brilliance theme <= 1.3.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/brilliance/wordpress-brilliance-theme-1-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-28172 State: PUBLISHED Published: 2023-11-12T22:24:13.073Z Last Updated: 2025-01-08T21:41:44.376Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: flippercode Products: WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) plugin <= 4.4.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wp-maps-plugin-4-4-2-cross-site-request
: - https://patchstack.com/database/vulnerability/wp-google-map-plugin/wordpress-wp-maps-plugin-4-4-2-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-28173 State: PUBLISHED Published: 2023-11-12T22:19:58.654Z Last Updated: 2025-01-08T21:42:35.782Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Amit Agarwal Products: Google XML Sitemap for Images Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Images plugin <= 2.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/google-image-sitemap/wordpress-google-xml-sitemap-for-images-plugin-2-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-28174 State: PUBLISHED Published: 2023-06-22T11:59:55.295Z Last Updated: 2024-10-10T17:22:10.787Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: eLightUp Products: eRocket Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in eLightUp eRocket plugin <= 1.2.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/erocket/wordpress-erocket-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-28175 State: PUBLISHED Published: 2023-06-15T10:14:34.076Z Last Updated: 2024-12-17T20:51:14.639Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: Bosch Products: BVMS, BVMS Viewer, Bosch DIVAR IP 3000, Bosch DIVAR IP 7000 R1, Bosch DIVAR IP 7000 R2, Bosch DIVAR IP all-in-one 7000 R3, Bosch DIVAR IP all-in-one 5000, Bosch DIVAR IP all-in-one 7000, DIVAR IP all-in-one 4000, DIVAR IP all-in-one 6000 Problem Types: CWE-200 Description: Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request. Additional Analyst
enticated user to access resources within the trusted internal network via a port forwarding request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-025794-bt.html
CVE ID: CVE-2023-28176 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:26:15.903Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 Description: Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advis
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://www.mozilla.org/security/advisories/mfsa2023-10/ - https://www.mozilla.org/security/advisories/mfsa2023-11/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1808352%2C1811637%2C1815904%2C1817442%2C1818674
CVE ID: CVE-2023-28177 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:15:40.630Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 111 Description: Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1803109%2C1808832%2C1809542%2C1817336
CVE ID: CVE-2023-28178 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:15:41.107Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https:/
apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674
CVE ID: CVE-2023-28179 State: PUBLISHED Published: 2023-08-14T22:40:32.582Z Last Updated: 2024-10-09T14:07:28.255Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted AppleScript binary may result in unexpected app termination or disclosure of process memory Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted AppleScript binary may result in unexpected app termination or disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-28180 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-11-04T19:15:48.161Z Vendors: Apple Products: macOS Problem Types: A user in a privileged network position may be able to cause a denial-of-service Description: A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A user in a privileged network position may be able to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-28181 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:13:51.477Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.4, macOS Big Sur 11.7.7, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - ht
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213765 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213760
CVE ID: CVE-2023-28182 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:12:16.234Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: A user in a privileged network position may be able to spoof a VPN server that is configured with EAP-only authentication on a device Description: The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A user in a privileged network position may be able to spoof a VPN server that is configured with EAP-only authentication on a device. Additional Analyst Notes: - CVE Program Con
of a VPN server that is configured with EAP-only authentication on a device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-28185 State: PUBLISHED Published: 2024-01-10T22:03:45.995Z Last Updated: 2025-06-03T14:26:27.624Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS, tvOS Problem Types: An app may be able to cause a denial-of-service Description: An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. An app may be able to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https
Vulnrichment: References: - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-28187 State: PUBLISHED Published: 2023-09-06T01:36:27.962Z Last Updated: 2025-02-13T16:48:30.327Z Vendors: Apple Products: macOS Problem Types: A user may be able to cause a denial-of-service Description: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/kb/HT213670
CVE ID: CVE-2023-28188 State: PUBLISHED Published: 2023-09-06T01:36:38.811Z Last Updated: 2025-02-13T16:48:31.043Z Vendors: Apple Products: macOS Problem Types: A remote user may be able to cause a denial-of-service Description: A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. A remote user may be able to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/kb/HT213670
CVE ID: CVE-2023-28189 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:11:31.109Z Vendors: Apple Products: macOS Problem Types: An app may be able to view sensitive information Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to view sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-28190 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:09:59.933Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura 13.3. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-28191 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T17:03:42.188Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS, tvOS Problem Types: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213759 - https://supp
chment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213759 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213760 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761
CVE ID: CVE-2023-28192 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:09:00.954Z Vendors: Apple Products: macOS Problem Types: An app may be able to read sensitive location information Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-28194 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:37:03.515Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to unexpectedly create a bookmark on the Home Screen Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home Screen. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676
CVE ID: CVE-2023-28195 State: PUBLISHED Published: 2023-09-06T01:36:35.868Z Last Updated: 2025-02-13T16:48:31.639Z Vendors: Apple Products: macOS Problem Types: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3. An app may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/kb/HT213670
CVE ID: CVE-2023-28197 State: PUBLISHED Published: 2024-01-10T22:03:27.667Z Last Updated: 2025-06-17T17:07:15.595Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-28198 State: PUBLISHED Published: 2023-08-14T22:40:37.966Z Last Updated: 2025-02-13T16:48:32.183Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: Processing web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - http://www.openwall.com/lists/oss-security/2023/09/11/1 - https://security.gentoo.org/glsa/202401-0
com/en-us/HT213676 - http://www.openwall.com/lists/oss-security/2023/09/11/1 - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-28199 State: PUBLISHED Published: 2023-08-14T22:40:39.047Z Last Updated: 2024-10-09T13:19:20.413Z Vendors: Apple Products: macOS Problem Types: An app may be able to disclose kernel memory Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. An app may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-28200 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-02-13T16:48:32.781Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An app may be able to disclose kernel memory Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support
m/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673 - https://support.apple.com/kb/HT213843
CVE ID: CVE-2023-28201 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T18:55:16.819Z Vendors: Apple Products: macOS, Safari, iOS and iPadOS, tvOS Problem Types: A remote user may be able to cause unexpected app termination or arbitrary code execution Description: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - ht
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213671 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-28202 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T17:00:30.958Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS, tvOS Problem Types: An app firewall setting may not take effect after exiting the Settings app Description: This issue was addressed with improved state management. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app firewall setting may not take effect after exiting the Settings app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.c
erences: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761
CVE ID: CVE-2023-28203 State: PUBLISHED Published: 2023-07-28T04:30:44.274Z Last Updated: 2025-03-07T20:30:27.040Z Vendors: Apple Products: Apple Music for Android Problem Types: An app may be able to access contacts Description: The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213833
CVE ID: CVE-2023-28204 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-10-21T23:05:45.355Z Vendors: Apple Products: macOS, Safari, watchOS, iOS and iPadOS, tvOS Problem Types: Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited. Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited. Additional
disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213762 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213765 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761 - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-28205 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-10-21T23:15:20.482Z Vendors: Apple Products: iOS and iPadOS, Safari, macOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploit