Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40355 State: PUBLISHED Published: 2024-02-07T00:00:00.000Z Last Updated: 2025-06-17T17:04:11.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2023-40355-_396.html
CVE ID: CVE-2023-40356 State: PUBLISHED Published: 2024-07-09T15:38:56.245Z Last Updated: 2024-08-02T18:31:53.903Z Vendors: Ping Identity Products: PingOne MFA Integration Kit for PingFederate Problem Types: CWE-290 Description: PingOne MFA Integration Kit contains a vulnerability related to the Prompt Users to Set Up MFA configuration. Under certain conditions, this configuration could allow for a new MFA device to be paired with a target user account without requiring second-factor authentication from the target’s existing registered devices. A threat actor might be able to exploit this vulnerability to register their own MFA device with a target user’s account if they have existing knowle
to exploit this vulnerability to register their own MFA device with a target user’s account if they have existing knowledge of the target user’s first factor credential. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.pingidentity.com/r/en-us/pingfederate-pingone-mfa-ik/bks1657303194394
CVE ID: CVE-2023-40357 State: PUBLISHED Published: 2023-09-06T09:21:35.820Z Last Updated: 2024-09-27T20:07:01.652Z Vendors: TP-LINK Products: Archer AX50, Archer A10, Archer AX10, Archer AX11000 Problem Types: OS command injection Description: Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)_V1_230529', Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504', Archer AX10 firmware versions prior to 'Archer AX10(JP)_V1.2_230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)_V1_230523'. Additional Analyst Note
(JP)_V1.2_230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)_V1_230523'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-ax50/#Firmware - https://www.tp-link.com/jp/support/download/archer-a10/#Firmware - https://www.tp-link.com/jp/support/download/archer-ax10/#Firmware - https://www.tp-link.com/jp/support/download/archer-ax11000/#Firmware - https://jvn.jp/en/vu/JVNVU99392903/
CVE ID: CVE-2023-40359 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T14:50:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://invisible-island.net/xterm/xterm.log.html#xterm_380
CVE ID: CVE-2023-40360 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-08-02T18:31:53.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/qemu-project/qemu/-/issues/1815 - https://gitlab.com/birkelund/qemu/-/commit/6c8f8456cb0b239812dee5211881426496da7b98 - https://www.qemu.org/docs/master/system/security.html - https://security.netapp.com/advisory/ntap-20230915-00
96da7b98 - https://www.qemu.org/docs/master/system/security.html - https://security.netapp.com/advisory/ntap-20230915-0004/
CVE ID: CVE-2023-40361 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T17:52:56.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vianic/CVE-2023-40361/blob/main/advisory/advisory.md
CVE ID: CVE-2023-40362 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-20T16:37:59.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protections allows remote attackers to arbitrarily delete the contractors from any user's account when the user ID and contractor information is known. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.classaction.org/news/centralsquare-hit-with-class-action-over-2017-2018-click2gov-data-breach - https://github.com/ally-petitt/CVE-2023-40362
CVE ID: CVE-2023-40363 State: PUBLISHED Published: 2023-11-18T17:14:04.546Z Last Updated: 2024-11-21T18:55:07.044Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: IBM Products: InfoSphere Information Server Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force ID: 263332. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7070742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263332
CVE ID: CVE-2023-40367 State: PUBLISHED Published: 2023-10-14T16:46:07.154Z Last Updated: 2024-09-16T19:20:54.451Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 263376. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7049133 - https://exchange.xforce.
tainer: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7049133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263376
CVE ID: CVE-2023-40368 State: PUBLISHED Published: 2023-09-20T18:43:43.601Z Last Updated: 2024-09-24T15:31:05.285Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Storage Protect Client, Storage Protect for Space Management, Storage Protect for Virtual Environments Problem Types: CWE-200 Description: IBM Storage Protect 8.1.0.0 through 8.1.19.0 could allow a privileged user to obtain sensitive information from the administrative command line client. IBM X-Force ID: 263456. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7034288 - https://exchange.xforce.ibmcloud.co
ISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7034288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263456
CVE ID: CVE-2023-40370 State: PUBLISHED Published: 2023-08-22T21:57:37.071Z Last Updated: 2024-10-02T15:12:35.118Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Robotic Process Automation Problem Types: 300 Channel Accessible by Non-Endpoint ('Man-in-the-Middle') Description: IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script content if the remote REST request computer policy is enabled. IBM X-Force ID: 263470. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028218 - https://exchange.xforce.ibmcloud.com/
A ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263470
CVE ID: CVE-2023-40371 State: PUBLISHED Published: 2023-08-24T13:00:56.021Z Last Updated: 2024-10-01T16:09:30.283Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: AIX Problem Types: CWE-327 Description: IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263476
CVE ID: CVE-2023-40372 State: PUBLISHED Published: 2023-10-16T23:02:30.073Z Last Updated: 2025-02-13T17:07:45.079Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: 263499. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263499 - https://security.netapp.com/a
support/pages/node/7047561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263499 - https://security.netapp.com/advisory/ntap-20231116-0007/
CVE ID: CVE-2023-40373 State: PUBLISHED Published: 2023-10-16T23:08:25.937Z Last Updated: 2025-02-13T17:07:45.697Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263574 - https://security.netapp.com/
/support/pages/node/7047563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263574 - https://security.netapp.com/advisory/ntap-20231116-0006/
CVE ID: CVE-2023-40374 State: PUBLISHED Published: 2023-10-16T22:47:19.415Z Last Updated: 2025-02-13T17:07:46.295Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted query statement. IBM X-Force ID: 263575. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7047261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263575 - https://security.netapp.com/advisory/ntap-20231116-0007/
CVE ID: CVE-2023-40375 State: PUBLISHED Published: 2023-09-28T17:38:59.038Z Last Updated: 2024-09-23T18:18:47.213Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-269 Description: Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7038748 - https://https://exchange.xfor
r: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7038748 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/263580
CVE ID: CVE-2023-40376 State: PUBLISHED Published: 2023-10-04T13:46:08.634Z Last Updated: 2024-09-19T14:47:34.157Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: UrbanCode Deploy Problem Types: CWE-862 Description: IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7037230 - https://exchange.xforce.ibmcloud.com/vul
DP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7037230 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263581
CVE ID: CVE-2023-40377 State: PUBLISHED Published: 2023-10-16T00:32:31.280Z Last Updated: 2024-09-16T19:13:33.076Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: i Problem Types: CWE-269 Description: Backup, Recovery, and Media Services (BRMS) for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263583. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7048121 - https://excha
Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7048121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263583
CVE ID: CVE-2023-40378 State: PUBLISHED Published: 2023-10-15T01:36:02.620Z Last Updated: 2024-09-16T19:19:27.559Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: i Problem Types: CWE-269 Description: IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263584. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
t: References: - https://www.ibm.com/support/pages/node/7047240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/263584
CVE ID: CVE-2023-40383 State: PUBLISHED Published: 2024-01-10T22:03:41.602Z Last Updated: 2025-06-17T17:05:10.794Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-40384 State: PUBLISHED Published: 2023-09-26T20:14:48.111Z Last Updated: 2025-11-04T19:17:50.805Z Vendors: Apple Products: iOS and iPadOS, tvOS, macOS Problem Types: An app may be able to read sensitive location information Description: A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - http://seclis
com/en-us/HT213938 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/10 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-40385 State: PUBLISHED Published: 2024-01-10T22:03:31.999Z Last Updated: 2025-06-17T17:01:24.031Z Vendors: Apple Products: iOS and iPadOS, Safari, macOS Problem Types: A remote attacker may be able to view leaked DNS queries with Private Relay turned on Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. A remote attacker may be able to view leaked DNS queries with Private Relay turned on. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213941 - https://support.apple.
ferences: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213941 - https://support.apple.com/en-us/HT213940
CVE ID: CVE-2023-40386 State: PUBLISHED Published: 2023-09-26T20:14:39.588Z Last Updated: 2025-11-04T19:17:51.903Z Vendors: Apple Products: macOS Problem Types: An app may be able to access Notes attachments Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to access Notes attachments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-40388 State: PUBLISHED Published: 2023-09-26T20:14:52.089Z Last Updated: 2025-11-04T19:17:52.972Z Vendors: Apple Products: macOS Problem Types: Safari may save photos to an unprotected location Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. Safari may save photos to an unprotected location. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-40389 State: PUBLISHED Published: 2024-06-10T19:21:22.255Z Last Updated: 2025-11-04T18:16:40.873Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Ventura 13.6.5, macOS Monterey 12.7.4. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214083 - https://support.apple.com/en-us/HT214085 - https://support.apple.com/kb/HT214040 - https://support.apple.com/kb/HT214036 - https://support.apple.com/k
s/HT214085 - https://support.apple.com/kb/HT214040 - https://support.apple.com/kb/HT214036 - https://support.apple.com/kb/HT214035 - https://support.apple.com/kb/HT214041
CVE ID: CVE-2023-40390 State: PUBLISHED Published: 2024-03-28T15:39:12.808Z Last Updated: 2025-11-04T19:17:54.059Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.2. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT214036
CVE ID: CVE-2023-40391 State: PUBLISHED Published: 2023-09-26T20:14:37.580Z Last Updated: 2025-11-04T19:17:57.377Z Vendors: Apple Products: iOS and iPadOS, Xcode, tvOS, macOS Problem Types: An app may be able to disclose kernel memory Description: The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14, Xcode 15. An app may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213939 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - http://s
pple.com/en-us/HT213939 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/7 - http://seclists.org/fulldisclosure/2023/Oct/10 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-40392 State: PUBLISHED Published: 2023-09-06T20:48:08.684Z Last Updated: 2025-02-13T17:07:50.334Z Vendors: Apple Products: macOS Problem Types: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213841 - https://support.apple.com/kb/HT213845 - https://support.apple.com/kb/HT213842
CVE ID: CVE-2023-40393 State: PUBLISHED Published: 2024-01-10T22:03:30.251Z Last Updated: 2025-11-04T19:17:58.463Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An authentication issue was addressed with improved state management. Description: An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/120949 - https://support.apple.com/en-us/120950
CVE ID: CVE-2023-40394 State: PUBLISHED Published: 2024-01-10T22:03:53.741Z Last Updated: 2025-06-20T15:39:33.574Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to access sensitive user data Description: The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213841
CVE ID: CVE-2023-40395 State: PUBLISHED Published: 2023-09-26T20:14:53.746Z Last Updated: 2025-11-04T19:18:07.139Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: An app may be able to access contacts Description: The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access contacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213932 - https://support.apple.com/en-us/HT213927 - https://sup
e.com/en-us/HT213938 - https://support.apple.com/en-us/HT213932 - https://support.apple.com/en-us/HT213927 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - https://support.apple.com/en-us/HT213937 - http://seclists.org/fulldisclosure/2023/Oct/10 - http://seclists.org/fulldisclosure/2023/Oct/6 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/9 - http://seclists.org/fulldisclosure/2023/Oct/3 - http://seclists.org/fulldisclosure/2023/Oct/4