Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-8773 State: PUBLISHED Published: 2020-10-27T19:48:41 Last Updated: 2024-08-04T21:31:37.000Z Vendors: Apple Products: iOS and iPadOS, tvOS, Safari, watchOS, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, iCloud for Windows 7.14, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: Refere
CVE ID: CVE-2019-8774 State: PUBLISHED Published: 2020-10-27T19:50:25 Last Updated: 2024-08-04T21:31:37.415Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: Parsing a maliciously crafted iBooks file may lead to a persistent denial-of-service Description: A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Parsing a maliciously crafted iBooks file may lead to a persistent denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210634 - https://support.apple.com/en-us/HT210603
CVE ID: CVE-2019-8775 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:36.682Z Vendors: Apple Products: iOS Problem Types: A person with physical access to an iOS device may be able to access contacts from the lock screen Description: The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210603
CVE ID: CVE-2019-8776 State: PUBLISHED Published: 2020-10-27T19:48:13 Last Updated: 2024-08-04T21:31:37.254Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210634
CVE ID: CVE-2019-8777 State: PUBLISHED Published: 2020-10-27T19:50:58 Last Updated: 2024-08-04T21:31:37.234Z Vendors: Apple Products: macOS Problem Types: A local attacker may be able to view contacts from the lock screen Description: A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. A local attacker may be able to view contacts from the lock screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT209600
CVE ID: CVE-2019-8779 State: PUBLISHED Published: 2019-12-18T17:33:22 Last Updated: 2024-08-04T21:31:37.200Z Vendors: Apple Products: iOS Problem Types: Third party app extensions may not receive the correct sandbox restrictions Description: A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210624
CVE ID: CVE-2019-8780 State: PUBLISHED Published: 2020-10-27T19:51:31 Last Updated: 2024-08-04T21:31:36.970Z Vendors: Apple Products: iOS and iPadOS, tvOS Problem Types: A malicious application may be able to determine kernel memory layout Description: The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13. A malicious application may be able to determine kernel memory layout. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210604 - https://support.apple.com/en-us/HT210603
CVE ID: CVE-2019-8781 State: PUBLISHED Published: 2019-12-18T17:33:22 Last Updated: 2024-08-04T21:31:37.170Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210634
CVE ID: CVE-2019-8782 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.302Z Vendors: Apple Products: iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210727 - https://s
ecution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210727 - https://support.apple.com/HT210721 - https://support.apple.com/HT210726 - https://support.apple.com/HT210723 - https://support.apple.com/HT210725 - https://security.gentoo.org/glsa/202003-22
CVE ID: CVE-2019-8783 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:37.219Z Vendors: Apple Products: iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows, iCloud for Windows (Legacy) Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: Refere
usly crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210727 - https://support.apple.com/HT210721 - https://support.apple.com/HT210726 - https://support.apple.com/HT210723 - https://support.apple.com/HT210728 - https://support.apple.com/HT210725 - https://security.gentoo.org/glsa/202003-22
CVE ID: CVE-2019-8784 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.302Z Vendors: Apple Products: iOS, macOS, iTunes for Windows, iCloud for Windows, iCloud for Windows (Legacy) Problem Types: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.ap
bitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210727 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support.apple.com/HT210726 - https://support.apple.com/HT210728
CVE ID: CVE-2019-8785 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:36.955Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support
//support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support.apple.com/HT210723
CVE ID: CVE-2019-8786 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:36.654Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support
CVE ID: CVE-2019-8787 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:36.934Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A remote attacker may be able to leak memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A remote attacker may be able to leak memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support.apple.com/HT210723
CVE ID: CVE-2019-8788 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:36.949Z Vendors: Apple Products: iOS, macOS Problem Types: Improper URL processing may lead to data exfiltration Description: An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Improper URL processing may lead to data exfiltration. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210721 - https://support.apple.com/HT210722
CVE ID: CVE-2019-8789 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.051Z Vendors: Apple Products: iOS, macOS Problem Types: Parsing a maliciously crafted iBooks file may lead to disclosure of user information Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Parsing a maliciously crafted iBooks file may lead to disclosure of user information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210721 - https://support.apple.com/HT210722
CVE ID: CVE-2019-8790 State: PUBLISHED Published: 2020-10-27T19:49:20 Last Updated: 2024-08-04T21:31:36.831Z Vendors: Apple Products: Swift for Ubuntu Problem Types: Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure Description: This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210647
CVE ID: CVE-2019-8791 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.471Z Vendors: Apple Products: Shazam-Android, Shazam-iOS Problem Types: Processing a maliciously crafted URL may lead to an open redirect Description: An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to an open redirect. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210744 - https://support.apple.com/HT210745
CVE ID: CVE-2019-8792 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.523Z Vendors: Apple Products: Shazam-Android, Shazam-iOS Problem Types: Processing a maliciously crafted URL may lead to arbitrary javascript code execution Description: An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to arbitrary javascript code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210744 - https://support.apple.com/HT210745
CVE ID: CVE-2019-8793 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.080Z Vendors: Apple Products: iOS Problem Types: A local user may be able to record the screen without a visible screen recording indicator Description: A consistency issue existed in deciding when to show the screen recording indicator. The issue was resolved with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2. A local user may be able to record the screen without a visible screen recording indicator. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210721
CVE ID: CVE-2019-8794 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:37.206Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to read restricted memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support.apple.com/HT210723
CVE ID: CVE-2019-8795 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.562Z Vendors: Apple Products: iOS, tvOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210721 - https://support.apple.com/HT210723
CVE ID: CVE-2019-8796 State: PUBLISHED Published: 2020-10-27T20:57:42 Last Updated: 2024-08-04T21:31:37.470Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: AirDrop transfers may be unexpectedly accepted while in Everyone mode Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, iOS 12.4.3, watchOS 6.1, iOS 13.2 and iPadOS 13.2. AirDrop transfers may be unexpectedly accepted while in Everyone mode. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210722 - https://support.apple.com/en-us/HT210721 - https://support.
er: References: - https://support.apple.com/en-us/HT210722 - https://support.apple.com/en-us/HT210721 - https://support.apple.com/en-us/HT210724 - https://support.apple.com/en-us/HT211134
CVE ID: CVE-2019-8797 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:37.450Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support
CVE ID: CVE-2019-8798 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:37.136Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support
CVE ID: CVE-2019-8799 State: PUBLISHED Published: 2020-10-27T19:50:48 Last Updated: 2024-08-04T21:31:36.955Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: An attacker in physical proximity may be able to passively observe device names in AWDL communications Description: This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210634 - https://support.app
nal Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210634 - https://support.apple.com/en-us/HT210604 - https://support.apple.com/en-us/HT210607 - https://support.apple.com/en-us/HT210603
CVE ID: CVE-2019-8800 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.487Z Vendors: Apple Products: Xcode Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210729
CVE ID: CVE-2019-8801 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.015Z Vendors: Apple Products: macOS, iTunes for Windows Problem Types: Running the iTunes installer in an untrusted directory may result in arbitrary code execution Description: A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210722 - https://support.apple.com/HT210726
CVE ID: CVE-2019-8802 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.150Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to gain root privileges Description: A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15.1. A malicious application may be able to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210722
CVE ID: CVE-2019-8803 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:37.374Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A local attacker may be able to login to the account of a previously logged in user without valid credentials. Description: An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials.. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.appl
ditional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210722 - https://support.apple.com/HT210723
CVE ID: CVE-2019-8804 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.475Z Vendors: Apple Products: iOS Problem Types: An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup Description: An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210721
CVE ID: CVE-2019-8805 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.448Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210722
CVE ID: CVE-2019-8806 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.470Z Vendors: Apple Products: Xcode Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210729
CVE ID: CVE-2019-8807 State: PUBLISHED Published: 2019-12-18T17:33:23 Last Updated: 2024-08-04T21:31:37.011Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210722
CVE ID: CVE-2019-8808 State: PUBLISHED Published: 2019-12-18T17:33:24 Last Updated: 2024-08-04T21:31:37.255Z Vendors: Apple Products: iOS, tvOS, watchOS, Safari, iTunes for Windows Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT2107
lyst Notes: - CVE Program Container: References: - https://support.apple.com/HT210724 - https://support.apple.com/HT210721 - https://support.apple.com/HT210726 - https://support.apple.com/HT210723 - https://support.apple.com/HT210725 - https://security.gentoo.org/glsa/202003-22