Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-38576 State: PUBLISHED Published: 2023-08-18T09:39:29.926Z Last Updated: 2024-10-08T14:53:29.515Z Vendors: LOGITEC CORPORATION Products: LAN-WH300N/RE Problem Types: Hidden Functionality Description: Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230810-01/ - https://jvn.jp/en/vu/JVNVU91630351/
CVE ID: CVE-2023-38579 State: PUBLISHED Published: 2024-02-06T21:16:48.926Z Last Updated: 2024-11-07T20:33:42.806Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Westermo Products: Lynx Problem Types: CWE-352 Description: The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-02
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
CVE ID: CVE-2023-38580 State: PUBLISHED Published: 2023-07-27T00:22:11.442Z Last Updated: 2024-10-23T14:06:20.805Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213848
CVE ID: CVE-2023-38581 State: PUBLISHED Published: 2024-05-16T20:47:19.915Z Last Updated: 2024-08-02T17:46:56.051Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Power Gadget software for Windows Problem Types: escalation of privilege, CWE-120 Description: Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE ID: CVE-2023-38582 State: PUBLISHED Published: 2023-09-18T20:04:48.193Z Last Updated: 2025-06-18T14:29:30.087Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Socomec Products: MODULYS GP (MOD3GP-SY-120K) Problem Types: CWE-79 Description: Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the field MAIL_RCV. When a legitimate user attempts to access to the vulnerable page of the web application, the XSS payload will be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
payload will be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03
CVE ID: CVE-2023-38583 State: PUBLISHED Published: 2024-01-08T14:47:39.869Z Last Updated: 2025-11-04T18:15:53.094Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-120 Description: A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1827 - https://lists.d
SA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1827 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-38584 State: PUBLISHED Published: 2023-10-19T19:20:20.059Z Last Updated: 2025-01-16T21:28:46.086Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Weintek Products: cMT-FHD, cMT-HDM, cMT3071, cMT3072, cMT3103, cMT3090, cMT3151 Problem Types: CWE-121 Description: In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-12 - https://dl.weintek.com/pub
Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-12 - https://dl.weintek.com/public/Document/TEC/TEC23005E_cMT_Web_Security_Update.pdf
CVE ID: CVE-2023-38585 State: PUBLISHED Published: 2023-08-23T02:51:09.660Z Last Updated: 2024-08-02T17:46:55.839Z Vendors: CBC Co.,Ltd. Products: NR4H, NR8H, NR16H series, DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series, NR-4M, NR-8M, NR-16M series, NR-4F, NR-8F, NR-16F series, DR-16M, DR-8M, DR-4M51 series Problem Types: Improper authentication Description: Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16
see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided. Additional Analyst Notes: - CVE Program Container: References: - https://download.ganzsecurity.pl/ - https://ganzsecurity.com/release/1578/digimasterpixelmaster-security-notice - https://jvn.jp/en/vu/JVNVU92545432/
CVE ID: CVE-2023-38586 State: PUBLISHED Published: 2023-09-26T20:14:41.083Z Last Updated: 2025-11-04T19:17:20.316Z Vendors: Apple Products: macOS Problem Types: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-38587 State: PUBLISHED Published: 2024-01-19T20:03:09.104Z Last Updated: 2025-06-17T21:19:23.386Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel NUC BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01028.html
CVE ID: CVE-2023-38588 State: PUBLISHED Published: 2023-09-06T09:23:21.160Z Last Updated: 2024-09-26T18:44:52.758Z Vendors: TP-LINK Products: Archer C3150 Problem Types: OS command injection Description: Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-c3150/#Firmware - https://jvn.jp/en/vu/JVNVU99392903/
CVE ID: CVE-2023-38590 State: PUBLISHED Published: 2023-07-28T04:30:40.531Z Last Updated: 2025-02-13T17:01:58.108Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
stem termination or corrupt kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/en-us/HT213848 - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213841 - https://support.apple.com/kb/HT213845 - https://support.apple.com/kb/HT213846 - https://support.apple.com/kb/HT213842 - https://support.apple.com/
kb/HT213845 - https://support.apple.com/kb/HT213846 - https://support.apple.com/kb/HT213842 - https://support.apple.com/kb/HT213848
CVE ID: CVE-2023-38591 State: PUBLISHED Published: 2023-08-07T00:00:00 Last Updated: 2024-10-11T14:12:25.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/nvram_ssid/README.md
CVE ID: CVE-2023-38592 State: PUBLISHED Published: 2023-07-28T04:30:42.372Z Last Updated: 2025-02-13T17:01:58.647Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: Processing web content may lead to arbitrary code execution Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, tvOS 16.6, macOS Ventura 13.5. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us
- https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213848 - http://www.openwall.com/lists/oss-security/2023/08/02/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/ - https://www.debian.org/security/2023/dsa-5468 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/ - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-38593 State: PUBLISHED Published: 2023-07-27T00:30:54.782Z Last Updated: 2025-02-13T17:01:59.270Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to cause a denial-of-service Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://
pple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/en-us/HT213848 - https://support.apple.com/kb/HT213846 - https://support.apple.com/kb/HT213842
CVE ID: CVE-2023-38594 State: PUBLISHED Published: 2023-07-26T23:46:22.932Z Last Updated: 2025-02-13T17:01:59.876Z Vendors: Apple Products: Safari, tvOS, iOS and iPadOS, macOS, watchOS Problem Types: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/H
https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213848 - http://www.openwall.com/lists/oss-security/2023/08/02/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/ - https://www.debian.org/security/2023/dsa-5468 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/ - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-38595 State: PUBLISHED Published: 2023-07-27T00:31:30.328Z Last Updated: 2025-02-13T17:02:00.510Z Vendors: Apple Products: Safari, tvOS, iOS and iPadOS, macOS, watchOS Problem Types: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.appl
us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213848 - http://www.openwall.com/lists/oss-security/2023/08/02/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/ - https://www.debian.org/security/2023/dsa-5468 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/ - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-38596 State: PUBLISHED Published: 2023-09-26T20:12:07.189Z Last Updated: 2025-11-04T19:17:24.683Z Vendors: Apple Products: iOS and iPadOS, tvOS, macOS, watchOS Problem Types: An app may fail to enforce App Transport Security Description: The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may fail to enforce App Transport Security. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - https://support.apple.com/en-us
- https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - https://support.apple.com/en-us/HT213937 - http://seclists.org/fulldisclosure/2023/Oct/10 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/9 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-38597 State: PUBLISHED Published: 2023-07-26T23:55:02.370Z Last Updated: 2025-02-13T17:02:01.766Z Vendors: Apple Products: Safari, iOS and iPadOS, macOS Problem Types: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, Safari 16.6. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-
47 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - http://www.openwall.com/lists/oss-security/2023/08/02/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/ - https://www.debian.org/security/2023/dsa-5468 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/ - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-38598 State: PUBLISHED Published: 2023-07-28T04:30:44.741Z Last Updated: 2025-02-13T17:02:02.335Z Vendors: Apple Products: tvOS, iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-u
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/en-us/HT213848 - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213841 - https://support.apple.com/kb/HT213845 - https://support.apple.com/kb/HT213846 - https://support.apple.com/kb/HT213842 - https://support.apple.com/kb/HT213848
CVE ID: CVE-2023-38599 State: PUBLISHED Published: 2023-07-28T04:30:43.299Z Last Updated: 2025-02-13T17:02:02.971Z Vendors: Apple Products: Safari, tvOS, iOS and iPadOS, macOS, watchOS Problem Types: A website may be able to track sensitive user information Description: A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.c
erences: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213848 - http://www.openwall.com/lists/oss-security/2023/08/02/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/ - https://www.debian.org/security/2023/dsa-5468 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/ - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-38600 State: PUBLISHED Published: 2023-07-27T00:22:21.257Z Last Updated: 2025-05-05T15:56:19.895Z Vendors: Apple Products: Safari, tvOS, iOS and iPadOS, macOS, watchOS Problem Types: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT2138
s://support.apple.com/en-us/HT213847 - https://support.apple.com/en-us/HT213846 - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213848 - http://www.openwall.com/lists/oss-security/2023/08/02/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/ - https://www.debian.org/security/2023/dsa-5468 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/ - https://security.gentoo.org/glsa/202401-04
CVE ID: CVE-2023-38601 State: PUBLISHED Published: 2023-07-28T04:30:40.061Z Last Updated: 2025-02-13T17:02:04.096Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/kb/HT2
- https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845
CVE ID: CVE-2023-38602 State: PUBLISHED Published: 2023-07-27T00:30:52.396Z Last Updated: 2024-10-22T20:38:26.590Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213844
CVE ID: CVE-2023-38603 State: PUBLISHED Published: 2023-07-27T00:31:09.910Z Last Updated: 2025-02-13T17:02:04.668Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A remote user may be able to cause a denial-of-service Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845 - https://support.apple.com/kb
/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845 - https://support.apple.com/kb/HT213842