Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-4224 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of a persistent device identifier. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.
. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - http://www.securityfocus.com/bid/104378 - https://support.apple.com/HT208849 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4225 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:30.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on Keychain state modifications. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - http://www.securitytracker
iner: References: - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - http://www.securityfocus.com/bid/104889 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4226 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of sensitive user information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208853 - http://www.securityfocus.com/bid/104888 - https://
Program Container: References: - https://support.apple.com/HT208853 - http://www.securityfocus.com/bid/104888 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4227 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Mail" component. It allows remote attackers to read the cleartext content of S/MIME encrypted messages via direct exfiltration. Additional Analyst Notes: - CVE Program Container: References: - https://efail.de/#cve - http://www.securitytracker.com/id/1041027 - http://www.securityfocus.com/bid/104897 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4228 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOFireWireAVC" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4229 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4230 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that triggers a SetAppSupportBits use-after-free because of a race condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44847/ - http://www.securitytracker.com/id/1041027 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1549 - ht
44847/ - http://www.securitytracker.com/id/1041027 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1549 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4232 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to overwrite cookies via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://security.gentoo.org/glsa/201808-04 - ht
ttps://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://usn.ubuntu.com/3687-1/ - https://support.apple.com/HT208848 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4233 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
application crash) via a crafted web site. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://usn.ubuntu.com/3687-1/ - https://support.apple.com/HT208848 - https://www.exploit-db.com/exploits/45998/ - https://support.apple.com/HT208852 - http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html
CVE ID: CVE-2018-4234 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4235 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks via an unspecified injection. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - http
tps://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4236 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4237 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a logic error. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - http
tps://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849 - https://www.exploit-db.com/exploits/45916/
CVE ID: CVE-2018-4238 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041031 - https://support.apple.com/HT208848
CVE ID: CVE-2018-4239 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041031 - https://support.apple.com/HT208848
CVE ID: CVE-2018-4240 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://su
support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849 - https://www.exploit-db.com/exploits/45391/
CVE ID: CVE-2018-4241 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44849/ - https://support.apple.com/HT208850 - https://bugs.chromium.org/p/project-ze
https://www.exploit-db.com/exploits/44849/ - https://support.apple.com/HT208850 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1558 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4242 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1042004 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4243 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://www.exploit-db.com/exploits/44848/ - https://support.apple.com/HT208851 - http:
s://support.apple.com/HT208850 - https://www.exploit-db.com/exploits/44848/ - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1564 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4244 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri Contacts" component. It allows physically proximate attackers to discover private contact information via Siri. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041031 - https://support.apple.com/HT208848
CVE ID: CVE-2018-4246 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support
n. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://usn.ubuntu.com/3743-1/ - https://support.apple.com/HT208851 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://support.apple.com/HT208848 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4247 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/Nate_Kappa/status/1004399403220766725 - http://www.securityfocus.com/bid/104366 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://support.appl
s.com/bid/104366 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://support.apple.com/HT208848
CVE ID: CVE-2018-4248 State: PUBLISHED Published: 2019-04-03T17:43:12 Last Updated: 2024-08-05T05:11:21.418Z Vendors: n/a Products: iOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to read restricted memory Description: An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT208937 - https://support.apple.com/kb/HT208938 - https://support.apple.com/kb/HT208935 - https://support.apple.com/kb/HT208936
CVE ID: CVE-2018-4249 State: PUBLISHED Published: 2018-06-08T00:00:00 Last Updated: 2024-08-05T05:11:21.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglr_ipfilter_input in com.apple.packet-mangler in the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow and stack-based buffer overflow) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.
fer overflow) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://lgtm.com/blog/apple_xnu_packet_mangler_CVE-2017-13904 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849 - http://packetstormsecurity.com/files/172828/Apple-packet-mangler-Remote-Code-Execution.html
CVE ID: CVE-2018-4250 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041031 - https://support.apple.com/HT208848
CVE ID: CVE-2018-4251 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849 - http://seclists.org/fulldisclosure/2019/Mar/45
CVE ID: CVE-2018-4252 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041031 - https://support.apple.com/HT208848
CVE ID: CVE-2018-4253 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:11:21.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read of kernel memory) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4254 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:11:22.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validation. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208849
CVE ID: CVE-2018-4255 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:11:22.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208849
CVE ID: CVE-2018-4256 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:11:22.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208849
CVE ID: CVE-2018-4257 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:11:22.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208849
CVE ID: CVE-2018-4258 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:11:22.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208849