Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-6176 State: PUBLISHED Published: 2019-11-20T01:31:12.617334Z Last Updated: 2024-09-16T21:08:22.933Z Vendors: Lenovo Products: ThinkPad USB-C Dock Firmware Problem Types: local privilege escalation Description: A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-27886
CVE ID: CVE-2019-6177 State: PUBLISHED Published: 2019-08-21T19:55:05.766706Z Last Updated: 2024-09-16T18:59:18.570Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Solution Center Problem Types: Privilege escalation Description: A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to Lenovo Vantage or Lenovo Diagnostics in April 2018. Additional Analyst Notes: - CVE Program Container: References: - https:
ovo Vantage or Lenovo Diagnostics in April 2018. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-27811
CVE ID: CVE-2019-6178 State: PUBLISHED Published: 2019-08-19T15:14:47.694136Z Last Updated: 2024-09-17T02:37:09.217Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Iomega and LenovoEMC Products: NAS products Problem Types: Information disclosure Description: An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutio
and their contents. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-25557
CVE ID: CVE-2019-6179 State: PUBLISHED Published: 2019-09-03T18:50:10.921568Z Last Updated: 2024-09-16T21:02:44.886Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA), XClarity Integrator (LXCI) for Microsoft System Center, XClarity Integrator (LXCI) for VMware vCenter Problem Types: information disclosure Description: An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 th
System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-27805
CVE ID: CVE-2019-6180 State: PUBLISHED Published: 2019-09-03T18:50:11.005700Z Last Updated: 2024-09-17T02:52:15.667Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA) Problem Types: code execution Description: A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/
ot executed on LXCA itself. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-27805
CVE ID: CVE-2019-6181 State: PUBLISHED Published: 2019-09-03T18:50:11.062782Z Last Updated: 2024-09-17T01:21:39.959Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA) Problem Types: code execution Description: A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-27805
CVE ID: CVE-2019-6182 State: PUBLISHED Published: 2019-09-03T18:50:11.119064Z Last Updated: 2024-09-17T02:11:43.067Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA) Problem Types: code execution Description: A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself. Additional Analyst Notes: - CVE Program Container: References: - https://suppo
d formula is not executed on LXCA itself. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-27805
CVE ID: CVE-2019-6183 State: PUBLISHED Published: 2019-12-10T18:05:17.141967Z Last Updated: 2024-09-16T18:50:15.393Z Vendors: Lenovo Products: Energy Management driver Problem Types: denial of service Description: A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-27682
CVE ID: CVE-2019-6184 State: PUBLISHED Published: 2019-11-20T01:31:13.013670Z Last Updated: 2024-09-17T02:10:34.830Z Vendors: Lenovo Products: Customer Engagement Service (CCSDK) Problem Types: local privilege escalation Description: A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-29289
CVE ID: CVE-2019-6185 State: REJECTED Published: N/A Last Updated: 2024-07-29T20:40:14.068Z Description: No description available.
CVE ID: CVE-2019-6186 State: PUBLISHED Published: 2019-11-20T01:31:13.404005Z Last Updated: 2024-09-16T17:23:01.398Z Vendors: Lenovo Products: Lenovo System Interface Foundation Problem Types: local privilege escalation Description: A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-29198
CVE ID: CVE-2019-6187 State: PUBLISHED Published: 2019-11-20T01:31:13.802773Z Last Updated: 2024-09-17T00:50:51.427Z Vendors: Lenovo Products: Lenovo XClarity Controller (XCC) Problem Types: arbitrary eode execution Description: A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server. Additional Analyst Notes: - CVE Program Container: References: - https://support.l
self and has no effect on the server. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-29118
CVE ID: CVE-2019-6188 State: PUBLISHED Published: 2019-11-12T20:40:54 Last Updated: 2024-08-04T20:16:24.282Z Vendors: Lenovo Products: ThinkPad T470p, ThinkPad T460p Problem Types: Unauthorized access Description: The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-27714
CVE ID: CVE-2019-6189 State: PUBLISHED Published: 2019-11-20T01:31:14.196742Z Last Updated: 2024-09-16T20:16:34.199Z Vendors: Lenovo Products: Lenovo System Interface Foundation Problem Types: local privilege escalation Description: A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-29198
CVE ID: CVE-2019-6190 State: PUBLISHED Published: 2020-02-14T17:10:26.285190Z Last Updated: 2024-09-16T22:31:10.172Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: BIOS Problem Types: denial of service Description: Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-28078
CVE ID: CVE-2019-6191 State: PUBLISHED Published: 2019-11-20T01:31:14.603241Z Last Updated: 2024-09-16T18:14:09.440Z Vendors: Lenovo Products: LenovoPaper Problem Types: local privilege escalation Description: A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-29187
CVE ID: CVE-2019-6192 State: PUBLISHED Published: 2019-12-10T18:05:17.706531Z Last Updated: 2024-09-17T04:20:49.230Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Power Management driver Problem Types: denial of service Description: A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/solutions/LEN-29334 - http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html
CVE ID: CVE-2019-6193 State: PUBLISHED Published: 2020-02-14T17:10:26.717483Z Last Updated: 2024-09-17T02:47:43.822Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA) Problem Types: CWE-284 Description: An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-29477
CVE ID: CVE-2019-6194 State: PUBLISHED Published: 2020-02-14T17:10:27.142426Z Last Updated: 2024-09-17T03:12:43.770Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: XClarity Administrator (LXCA) Problem Types: CWE-611 Description: An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-29477
CVE ID: CVE-2019-6195 State: PUBLISHED Published: 2020-02-14T17:10:27.559154Z Last Updated: 2024-09-16T16:14:10.788Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: XClarity Controller (XCC) Problem Types: CWE-264 Description: An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1) “LDAP Authentication Only with Local Authorization” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privile
n” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privileged user logging out. The authorization bypass does not exist when “Local Authentication and Authorization” or “LDAP Authentication and Authorization” modes are configured and used by XCC. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-29116
CVE ID: CVE-2019-6196 State: PUBLISHED Published: 2020-06-09T19:50:34.538003Z Last Updated: 2024-09-17T00:25:55.970Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Installation Packages Problem Types: CWE-426 Description: A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/len-27431
CVE ID: CVE-2019-6197 State: PUBLISHED Published: 2024-07-31T20:30:25.843Z Last Updated: 2024-07-31T21:00:05.134Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PC Manager Problem Types: CWE-287 Description: A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/186945.html
CVE ID: CVE-2019-6198 State: PUBLISHED Published: 2024-07-31T20:30:16.910Z Last Updated: 2024-08-02T18:11:26.320Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PC Manager Problem Types: CWE-287 Description: A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/186945.html
CVE ID: CVE-2019-6200 State: PUBLISHED Published: 2019-03-05T16:00:00 Last Updated: 2024-08-04T20:16:24.530Z Vendors: Apple Products: iOS, macOS Problem Types: An attacker in a privileged network position may be able to execute arbitrary code Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - http://www.securityfocus.com/bid/106694
CVE ID: CVE-2019-6201 State: PUBLISHED Published: 2019-12-18T17:33:15 Last Updated: 2024-08-04T20:16:24.578Z Vendors: Apple Products: iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT
Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209603 - https://support.apple.com/HT209604 - https://support.apple.com/HT209605
CVE ID: CVE-2019-6202 State: PUBLISHED Published: 2019-03-05T16:00:00 Last Updated: 2024-08-04T20:16:24.471Z Vendors: Apple Products: iOS, macOS, watchOS Problem Types: A malicious application may be able to elevate privileges Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - http://www.securityfocus.com/bid/106697 - https://support.apple.com/HT209448
CVE ID: CVE-2019-6203 State: PUBLISHED Published: 2020-04-17T17:47:06 Last Updated: 2024-08-04T20:16:23.863Z Vendors: Apple Products: iOS, macOS, tvOS Problem Types: An attacker in a privileged network position may be able to intercept network traffic Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600
CVE ID: CVE-2019-6204 State: PUBLISHED Published: 2019-12-18T17:33:15 Last Updated: 2024-08-04T20:16:24.522Z Vendors: Apple Products: iOS, Safari Problem Types: Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209603
CVE ID: CVE-2019-6205 State: PUBLISHED Published: 2019-03-05T16:00:00 Last Updated: 2024-08-04T20:16:23.855Z Vendors: Apple Products: iOS, macOS, tvOS Problem Types: A malicious application may cause unexpected changes in memory shared between processes Description: A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106695 - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://www.exploi
urityfocus.com/bid/106695 - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://www.exploit-db.com/exploits/46299/ - https://support.apple.com/HT209447 - http://packetstormsecurity.com/files/156051/XNU-vm_map_copy-Insufficient-Fix.html
CVE ID: CVE-2019-6206 State: PUBLISHED Published: 2019-03-04T20:00:00 Last Updated: 2024-08-04T20:16:24.470Z Vendors: Apple Products: iOS Problem Types: Password autofill may fill in passwords after they were manually cleared Description: An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106687 - https://support.apple.com/HT209443
CVE ID: CVE-2019-6207 State: PUBLISHED Published: 2019-12-18T17:33:15 Last Updated: 2024-08-04T20:16:24.570Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to determine kernel memory layout Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple
Container: References: - https://support.apple.com/HT209599 - https://support.apple.com/HT209601 - https://support.apple.com/HT209600 - https://support.apple.com/HT209602
CVE ID: CVE-2019-6208 State: PUBLISHED Published: 2019-03-05T16:00:00 Last Updated: 2024-08-04T20:16:24.467Z Vendors: Apple Products: iOS, macOS, tvOS Problem Types: A malicious application may cause unexpected changes in memory shared between processes Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106695 - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://www.exploi
urityfocus.com/bid/106695 - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://www.exploit-db.com/exploits/46296/ - https://support.apple.com/HT209447
CVE ID: CVE-2019-6209 State: PUBLISHED Published: 2019-03-05T16:00:00 Last Updated: 2024-08-04T20:16:24.538Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to determine kernel memory layout Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://www.exp
ogram Container: References: - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://www.exploit-db.com/exploits/46285/ - https://support.apple.com/HT209448 - http://www.securityfocus.com/bid/106739 - https://support.apple.com/HT209447
CVE ID: CVE-2019-6210 State: PUBLISHED Published: 2019-03-05T16:00:00 Last Updated: 2024-08-04T20:16:24.495Z Vendors: Apple Products: iOS, macOS, tvOS, watchOS Problem Types: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://support.apple.com/HT209448 - http://w
https://support.apple.com/HT209446 - https://support.apple.com/HT209443 - https://support.apple.com/HT209448 - http://www.securityfocus.com/bid/106739 - https://support.apple.com/HT209447
CVE ID: CVE-2019-6211 State: PUBLISHED Published: 2019-03-05T16:00:00 Last Updated: 2024-08-04T20:16:24.540Z Vendors: Apple Products: iOS, macOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT209446 - https://support.apple.com/HT209443