Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-9737 State: PUBLISHED Published: 2020-09-10T16:34:53.445614Z Last Updated: 2024-09-17T02:32:24.665Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Con
a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9738 State: PUBLISHED Published: 2020-09-10T16:35:00.677413Z Last Updated: 2024-09-16T20:11:46.955Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with access to the Content Repository Development Environment to store malicious scripts in certain node fields. These scripts may be executed in a victim’s browser when visiting the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Cont
a victim’s browser when visiting the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9739 State: PUBLISHED Published: 2020-09-18T14:07:28.094128Z Last Updated: 2024-09-16T20:52:09.847Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: Adobe Products: Media Encoder Problem Types: CWE-125 Description: Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Additional Analyst Notes: - CVE Progra
rability in that the target must visit a malicious page or open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/media-encoder/apsb20-57.html
CVE ID: CVE-2020-9740 State: PUBLISHED Published: 2020-09-10T16:34:33.661539Z Last Updated: 2024-09-16T16:43:36.807Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Importer. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: Refere
owser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9741 State: PUBLISHED Published: 2020-09-10T16:35:36.130797Z Last Updated: 2024-09-16T22:20:00.113Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: The AEM forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.
CVE ID: CVE-2020-9742 State: PUBLISHED Published: 2020-09-10T16:35:46.030370Z Last Updated: 2024-09-17T04:25:23.465Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below) and 6.3.3.8 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Inbox calendar feature. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://help
the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9743 State: PUBLISHED Published: 2020-09-10T16:36:06.556142Z Last Updated: 2024-09-16T18:28:22.816Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-20 Description: AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by an HTML injection vulnerability in the content editor component that allows unauthenticated users to craft an HTTP request that includes arbitrary HTML code in a parameter value. An attacker could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing). Addition
could then use the malicious GET request to lure victims to perform unsafe actions in the page (ex. phishing). Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/experience-manager/apsb20-56.html
CVE ID: CVE-2020-9744 State: PUBLISHED Published: 2020-09-18T14:08:05.090600Z Last Updated: 2024-09-16T20:47:27.921Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: Adobe Products: Media Encoder Problem Types: CWE-125 Description: Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Additional Analyst Notes: - CVE Progra
CVE ID: CVE-2020-9745 State: PUBLISHED Published: 2020-09-18T14:08:50.852394Z Last Updated: 2024-09-16T22:21:14.317Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: Adobe Products: Media Encoder Problem Types: CWE-125 Description: Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Additional Analyst Notes: - CVE Progra
CVE ID: CVE-2020-9746 State: PUBLISHED Published: 2020-10-14T13:17:13.130Z Last Updated: 2025-04-23T19:47:48.810Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Flash Player Problem Types: CWE-476 Description: Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/flash-player/apsb20-58.html
CVE ID: CVE-2020-9747 State: PUBLISHED Published: 2020-10-21T20:02:04.811339Z Last Updated: 2024-09-17T03:37:50.042Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-415 Description: Adobe Animate version 20.5 (and earlier) is affected by a double free vulnerability when parsing a crafted .fla file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/animate/apsb20-61.html
CVE ID: CVE-2020-9748 State: PUBLISHED Published: 2020-10-21T20:01:25.675868Z Last Updated: 2024-09-17T04:19:13.737Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-121 Description: Adobe Animate version 20.5 (and earlier) is affected by a stack overflow vulnerability, which could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/animate/apsb20-61.html
CVE ID: CVE-2020-9749 State: PUBLISHED Published: 2020-10-21T20:01:45.087421Z Last Updated: 2024-09-17T02:01:27.794Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-125 Description: Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/animate/apsb20-61.html
CVE ID: CVE-2020-9750 State: PUBLISHED Published: 2020-10-21T20:02:14.282829Z Last Updated: 2024-09-16T17:43:46.372Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-125 Description: Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability, which could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/animate/apsb20-61.html
CVE ID: CVE-2020-9751 State: PUBLISHED Published: 2020-03-03T09:15:14 Last Updated: 2024-08-04T10:43:04.395Z Vendors: NAVER Corporation Products: Naver Cloud Explorer Problem Types: CWE-494 Description: Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://cve.naver.com/detail/cve-2020-9751
CVE ID: CVE-2020-9752 State: PUBLISHED Published: 2020-03-23T02:15:13 Last Updated: 2024-08-04T10:43:05.125Z Vendors: NAVER Corporation Products: Naver Cloud Explorer Problem Types: CWE-73 Description: Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe. Additional Analyst Notes: - CVE Program Container: References: - https://cve.naver.com/detail/cve-2020-9752
CVE ID: CVE-2020-9753 State: PUBLISHED Published: 2020-05-20T02:25:11 Last Updated: 2024-08-04T10:43:04.403Z Vendors: NAVER Corporation Products: Whale Browser Installer Problem Types: CWE-347 Description: Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer. Additional Analyst Notes: - CVE Program Container: References: - https://cve.naver.com/detail/cve-2020-9753
CVE ID: CVE-2020-9754 State: PUBLISHED Published: 2022-06-27T01:40:09 Last Updated: 2024-08-04T10:43:04.600Z Vendors: NAVER Products: NAVER Whale browser Problem Types: CWE-284 Description: NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode. Additional Analyst Notes: - CVE Program Container: References: - https://cve.naver.com/detail/cve-2020-9754.html
CVE ID: CVE-2020-9756 State: PUBLISHED Published: 2020-03-06T14:28:46 Last Updated: 2024-08-04T10:43:04.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050 and 0x80102054 allows a local user with low privileges to read/write 1/2/4 bytes from or to an IO port. This could be leveraged in a number of ways to ultimately run code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/viper-rgb-driver-multiple-vulnerabilities
CVE ID: CVE-2020-9757 State: PUBLISHED Published: 2020-03-04T16:03:22 Last Updated: 2024-08-04T10:43:04.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md - https://github.com/giany/CVE/blob/master/CVE-2020-9757.txt - https://github.com/nystudio107/craft-seomatic/commit/65ab659cb6c914c7ad671af1e417c0da2431f79b - https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9a
59cb6c914c7ad671af1e417c0da2431f79b - https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9ab43df02cc0f
CVE ID: CVE-2020-9758 State: PUBLISHED Published: 2020-03-09T18:27:20 Last Updated: 2024-08-04T10:43:04.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level access, leading to full account takeover. The attack fetches multiple credentials because they are stored in the database (stored XSS). This affects the mobile/chat URI via the lgn and psswrd parameters. Additional Analyst Notes: -
database (stored XSS). This affects the mobile/chat URI via the lgn and psswrd parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ari034/CVE-2020-9758
CVE ID: CVE-2020-9759 State: PUBLISHED Published: 2020-03-23T15:36:51.058415Z Last Updated: 2024-09-17T03:39:08.185Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files. Additional Analyst Notes: - CVE Program Container: References: - https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html - https://lists.debian.org/debian-lts-anno
ainer: References: - https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html - https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html
CVE ID: CVE-2020-9760 State: PUBLISHED Published: 2020-03-23T15:39:49 Last Updated: 2024-08-04T10:43:04.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick. Additional Analyst Notes: - CVE Program Container: References: - https://weechat.org/doc/security/ - https://github.com/weechat/weechat/commit/40ccacb4330a64802b1f1e28ed9a6b6d3ca9197f - https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html - https://security.gentoo.org/glsa/202003-51 - http
- https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html - https://security.gentoo.org/glsa/202003-51 - https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html
CVE ID: CVE-2020-9761 State: PUBLISHED Published: 2020-03-04T16:03:34 Last Updated: 2024-08-04T10:43:04.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distributed Garbage Collector method is called. Additional Analyst Notes: - CVE Program Container: References: - https://unctad.org/en/Pages/DTL/TTL/ASYCUDA-Programme.aspx - https://pastebin.com/jP4thzzG
CVE ID: CVE-2020-9767 State: PUBLISHED Published: 2020-08-14T17:07:44 Last Updated: 2024-08-04T10:43:04.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed this issue, which only applies to Windows users, in the 5.0.4 client release. Additional Analyst Notes: - CVE Program Container: References: - https://support.zoom.us/hc/en-us/articles/360044350792-Security-CVE-2020-9767
CVE ID: CVE-2020-9768 State: PUBLISHED Published: 2020-04-01T17:55:10 Last Updated: 2024-08-04T10:43:05.148Z Vendors: Apple Products: iOS, tvOS, watchOS Problem Types: An application may be able to execute arbitrary code with system privileges Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT211102 - https://support.apple.com/HT211101 - https://support.apple.com/HT211103
CVE ID: CVE-2020-9769 State: PUBLISHED Published: 2020-04-01T17:54:57 Last Updated: 2024-08-04T10:43:04.597Z Vendors: Apple Products: macOS Problem Types: Multiple issues in Vim Description: Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple issues in Vim. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT211100
CVE ID: CVE-2020-9770 State: PUBLISHED Published: 2020-04-01T17:55:59 Last Updated: 2024-08-04T10:43:04.974Z Vendors: Apple Products: iOS Problem Types: An attacker in a privileged network position may be able to intercept Bluetooth traffic Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT211102
CVE ID: CVE-2020-9771 State: PUBLISHED Published: 2020-10-22T17:52:30 Last Updated: 2024-08-04T10:43:05.189Z Vendors: Apple Products: macOS Problem Types: A user may gain access to protected parts of the file system Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A user may gain access to protected parts of the file system. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211100
CVE ID: CVE-2020-9772 State: PUBLISHED Published: 2020-10-22T17:53:27 Last Updated: 2024-08-04T10:43:04.452Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211100 - https://support.apple.com/kb/HT211102 - https://support.apple.com/kb/HT211101 - https://support.apple.com/kb/HT211103
CVE ID: CVE-2020-9773 State: PUBLISHED Published: 2020-04-01T17:56:14 Last Updated: 2024-08-04T10:43:05.126Z Vendors: Apple Products: iOS Problem Types: A malicious application may be able to identify what other applications a user has installed Description: The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malicious application may be able to identify what other applications a user has installed. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT211850 - http://seclists.org/fulldisclosure/2020/Nov/20
CVE ID: CVE-2020-9774 State: PUBLISHED Published: 2020-10-27T20:12:06 Last Updated: 2024-08-04T10:43:04.475Z Vendors: Apple Products: macOS Problem Types: Encrypted data may be inappropriately accessed Description: An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted data. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Encrypted data may be inappropriately accessed. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT210919
CVE ID: CVE-2020-9775 State: PUBLISHED Published: 2020-04-01T17:55:35 Last Updated: 2024-08-04T10:43:04.399Z Vendors: Apple Products: iOS Problem Types: A user's private browsing activity may be unexpectedly saved in Screen Time Description: An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211100 - https://support.apple.com/HT211102
CVE ID: CVE-2020-9776 State: PUBLISHED Published: 2020-04-01T17:55:21 Last Updated: 2024-08-04T10:43:04.529Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to access a user's call history Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT211100
CVE ID: CVE-2020-9777 State: PUBLISHED Published: 2020-04-01T17:55:44 Last Updated: 2024-08-04T10:43:04.500Z Vendors: Apple Products: iOS Problem Types: Cropped videos may not be shared properly via Mail Description: An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video. This issue is fixed in iOS 13.4 and iPadOS 13.4. Cropped videos may not be shared properly via Mail. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT211102