Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-1713 State: PUBLISHED Published: 2021-01-12T19:42:42 Last Updated: 2024-10-08T16:17:43.099Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/
Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1713
CVE ID: CVE-2021-1714 State: PUBLISHED Published: 2021-01-12T19:42:43 Last Updated: 2024-10-08T16:17:43.653Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1, Excel Services Problem Types: Remote Code Execu
13 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1, Excel Services Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1714
CVE ID: CVE-2021-1715 State: PUBLISHED Published: 2021-01-12T19:42:43 Last Updated: 2024-10-08T16:17:44.178Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Server 2019, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Word 2016, Microsoft Office 2010 Service Pack 2, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft SharePoint Server 2010 Service Pack 2, Microsoft Word 2010 Service Pack 2, Microsoft Word 2013 Servic
Pack 2, Microsoft SharePoint Server 2010 Service Pack 2, Microsoft Word 2010 Service Pack 2, Microsoft Word 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Word Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1715
CVE ID: CVE-2021-1716 State: PUBLISHED Published: 2021-01-12T19:42:44 Last Updated: 2024-10-08T16:17:44.772Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Server 2019, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Word 2016, Microsoft Office 2010 Service Pack 2, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft SharePoint Server 2010 Service Pack 2, Microsof
Service Pack 2, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft SharePoint Server 2010 Service Pack 2, Microsoft Word 2010 Service Pack 2, Microsoft Word 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Word Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1716
CVE ID: CVE-2021-1717 State: PUBLISHED Published: 2021-01-12T19:42:45 Last Updated: 2024-10-08T16:17:45.321Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1717
CVE ID: CVE-2021-1718 State: PUBLISHED Published: 2021-01-12T19:42:45 Last Updated: 2024-11-19T15:25:28.523Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Foundation 2010 Service Pack 2 Problem Types: Tampering Description: Microsoft SharePoint Server Tampering Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1718
CVE ID: CVE-2021-1719 State: PUBLISHED Published: 2021-01-12T19:42:46 Last Updated: 2024-10-08T16:17:45.857Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019 Problem Types: Elevation of Privilege Description: Microsoft SharePoint Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1719
CVE ID: CVE-2021-1721 State: PUBLISHED Published: 2021-02-25T23:01:26 Last Updated: 2024-08-03T16:18:11.551Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), PowerShell Core 7.1, PowerShell Core 7.0, .NET Core 2.1, .NET Core 3.1, .NET 5.0, Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.8, Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Problem Types: Denial of Service Description: .NET Core and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Contain
Description: .NET Core and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1721
CVE ID: CVE-2021-1722 State: PUBLISHED Published: 2021-02-25T23:01:26 Last Updated: 2024-08-03T16:18:11.509Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1,
, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Fax Service Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.micro
Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1722
CVE ID: CVE-2021-1723 State: PUBLISHED Published: 2021-01-12T19:42:47 Last Updated: 2024-10-08T16:17:31.472Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: ASP.NET Core 3.1, ASP.NET Core 5.0, Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.8, Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Problem Types: Denial of Service Description: ASP.NET Core and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723
CVE ID: CVE-2021-1724 State: PUBLISHED Published: 2021-02-25T23:01:27 Last Updated: 2024-08-03T16:18:11.567Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics NAV 2018, Microsoft Dynamics 365 Business Central 2020 Release Wave 1, Dynamics 365 Business Central 2019 Release Wave 2 (On-Premise), Microsoft Dynamics NAV 2017, Microsoft Dynamics 365 Business Central 2020 Release Wave 2, Microsoft Dynamics NAV 2015, Microsoft Dynamics NAV 2016 Problem Types: Spoofing Description: Microsoft Dynamics Business Central Cross-site Scripting Vulnerability Additional Analyst Notes: - CVE Program Container: References: - h
s Business Central Cross-site Scripting Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1724
CVE ID: CVE-2021-1725 State: PUBLISHED Published: 2021-01-12T19:42:47 Last Updated: 2024-10-08T16:17:31.929Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Bot Framework SDK for .NET Framework, Bot Framework SDK for JavaScript, Bot Framework SDK for Python Problem Types: Information Disclosure Description: Bot Framework SDK Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1725
CVE ID: CVE-2021-1726 State: PUBLISHED Published: 2021-02-25T23:01:28 Last Updated: 2024-08-03T16:18:11.516Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2010 Service Pack 2, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1726
CVE ID: CVE-2021-1727 State: PUBLISHED Published: 2021-02-25T23:01:28 Last Updated: 2024-08-03T16:18:11.535Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1,
, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Installer Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.micro
on of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1727
CVE ID: CVE-2021-1728 State: PUBLISHED Published: 2021-02-25T23:01:29 Last Updated: 2024-08-03T16:18:11.467Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: System Center 2019 Operations Manager Problem Types: Elevation of Privilege Description: System Center Operations Manager Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1728
CVE ID: CVE-2021-1729 State: PUBLISHED Published: 2021-03-11T14:58:23 Last Updated: 2024-08-03T16:18:11.605Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Elevation of Privilege Description: Windows Update Stack Setup Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: Ref
: Windows Update Stack Setup Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1729 - https://www.zerodayinitiative.com/advisories/ZDI-21-284/
CVE ID: CVE-2021-1730 State: PUBLISHED Published: 2021-02-25T23:01:30 Last Updated: 2024-08-03T16:18:11.528Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18 Problem Types: Spoofing Description: <p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p> <p>This update addresses this vulnerability.</p> <p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than
prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.</p> Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1730
CVE ID: CVE-2021-1731 State: PUBLISHED Published: 2021-02-25T23:01:30 Last Updated: 2024-08-03T16:18:11.444Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004 Problem Types: Security Feature Bypass Description: PFX Encryption Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References:
ion: PFX Encryption Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1731
CVE ID: CVE-2021-1732 State: PUBLISHED Published: 2021-02-25T23:01:31.000Z Last Updated: 2025-10-21T23:25:53.855Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Elevation of Privilege Description: Windows Win32k Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP
ption: Windows Win32k Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732 - http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html - http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html
CVE ID: CVE-2021-1733 State: PUBLISHED Published: 2021-02-25T23:01:32 Last Updated: 2024-11-19T15:34:55.492Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: PsExec Problem Types: Elevation of Privilege Description: Sysinternals PsExec Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1733
CVE ID: CVE-2021-1734 State: PUBLISHED Published: 2021-02-25T23:01:32 Last Updated: 2024-11-19T15:35:43.142Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1,
, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Windows Remote Procedure Call Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
Call Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1734
CVE ID: CVE-2021-1736 State: PUBLISHED Published: 2021-04-02T17:46:44 Last Updated: 2024-08-03T16:18:11.513Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212147
CVE ID: CVE-2021-1737 State: PUBLISHED Published: 2021-04-02T17:45:53 Last Updated: 2024-08-03T16:18:11.466Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT212146 - https://support.apple.com/en-us/HT212147
CVE ID: CVE-2021-1738 State: PUBLISHED Published: 2021-04-02T17:47:06 Last Updated: 2024-08-03T16:18:11.599Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT212146 - https://support.apple.com/en-us/HT212147
CVE ID: CVE-2021-1739 State: PUBLISHED Published: 2021-09-08T14:54:36 Last Updated: 2024-08-03T16:18:11.481Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: A local user may be able to modify protected parts of the file system Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT2123
the file system. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325 - https://support.apple.com/en-us/HT212326 - https://support.apple.com/en-us/HT212327
CVE ID: CVE-2021-1740 State: PUBLISHED Published: 2021-09-08T14:56:05 Last Updated: 2024-08-03T16:18:11.543Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: A local user may be able to modify protected parts of the file system Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en
st Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325 - https://support.apple.com/en-us/HT212326
CVE ID: CVE-2021-1741 State: PUBLISHED Published: 2021-04-02T17:47:57 Last Updated: 2024-08-03T16:18:11.431Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212147 - https://support.apple.com/e
yst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212147 - https://support.apple.com/en-us/HT212146 - https://support.apple.com/en-us/HT212148 - https://support.apple.com/en-us/HT212149