Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-27917 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T21:12:57.905Z Vendors: Contec CO.,LTD. Products: CONPROSYS IoT Gateway products Problem Types: OS Command Injection Description: OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privilege. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ve
CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/se
- CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf - https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware - https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware - https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware - https://jvn.jp/en/vu/JVNVU96198617/
CVE ID: CVE-2023-27918 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T21:02:42.166Z Vendors: TMS Products: Appointment and Event Booking Calendar for WordPress - Amelia Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ameliabooking/#developers - http
Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ameliabooking/#developers - https://jvn.jp/en/jp/JVN00971105/
CVE ID: CVE-2023-27919 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T21:01:56.329Z Vendors: NE Inc. Products: NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) Problem Types: Improper Authentication Description: Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://main.next-engine.com/Usernotice/detail?id=1054 - https://jvn.jp/en/jp/JVN50862842/
CVE ID: CVE-2023-27920 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T13:58:56.692Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: Improper access control Description: Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmware - https://www.c
- https://www.contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmware - https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_solarview_230508.pdf - https://jvn.jp/en/vu/JVNVU92106300/
CVE ID: CVE-2023-27921 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T13:59:20.243Z Vendors: JINS Inc. Products: JINS MEME CORE Problem Types: Use of hard-coded cryptographic key Description: JINS MEME CORE Firmware version 2.2.0 and earlier uses a hard-coded cryptographic key, which may lead to data acquired by a sensor of the affected product being decrypted by a network-adjacent attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jinsmeme.com/media/2023-04-fwapp2 - https://jvn.jp/en/jp/JVN13306058/
CVE ID: CVE-2023-27922 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T17:51:18.437Z Vendors: Stefano Lissa & The Newsletter Team Products: Newsletter Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/newsletter/ - https://jvn.jp/en/jp/JVN59341308/
CVE ID: CVE-2023-27923 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T18:08:53.092Z Vendors: Vektor,Inc. Products: VK Blocks and VK Blocks Pro Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/ - https://jvn.jp/en/jp/JVN95792402/
CVE ID: CVE-2023-27925 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T18:14:59.906Z Vendors: Vektor,Inc. Products: VK Blocks and VK Blocks Pro Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/ - https://jvn.jp/en/jp/JVN95792402/
CVE ID: CVE-2023-27926 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T18:16:19.508Z Vendors: Vektor,Inc. Products: VK All in One Expansion Unit Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/ - https://jvn.jp/en/jp/JVN95792402/
CVE ID: CVE-2023-27927 State: PUBLISHED Published: 2023-03-27T19:33:49.432Z Last Updated: 2025-01-17T17:36:30.688Z Vendors: SAUTER Products: EY-AS525F001 with moduWeb Problem Types: CWE-319 Cleartext Transmission of Sensitive Information Description: An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03
CVE ID: CVE-2023-27928 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:52:43.511Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to access information about a user’s contacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - ht
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27929 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:51:32.195Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: Processing a maliciously crafted image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT21
: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674
CVE ID: CVE-2023-27930 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T18:43:15.698Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS, tvOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT2
ttps://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761
CVE ID: CVE-2023-27931 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T20:19:05.435Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app may be able to access user-sensitive data Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.3, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.co
rences: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213603 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213604
CVE ID: CVE-2023-27932 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T20:17:39.339Z Vendors: Apple Products: macOS, Safari, iOS and iPadOS, watchOS, tvOS Problem Types: Processing maliciously crafted web content may bypass Same Origin Policy Description: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213671 - h
ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213671 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674
CVE ID: CVE-2023-27933 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T20:16:31.386Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app with root privileges may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://supp
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674
CVE ID: CVE-2023-27934 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-11-04T19:15:43.773Z Vendors: Apple Products: macOS Problem Types: A remote attacker may be able to cause unexpected app termination or arbitrary code execution Description: A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677
CVE ID: CVE-2023-27935 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-11-04T19:15:44.862Z Vendors: Apple Products: macOS Problem Types: A remote user may be able to cause unexpected app termination or arbitrary code execution Description: The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en
es: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27936 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T20:05:34.708Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to cause unexpected system termination or write kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple
ogram Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27937 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:56:27.473Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution Description: An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27938 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:55:28.493Z Vendors: Apple Products: macOS Problem Types: Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213650
CVE ID: CVE-2023-27939 State: PUBLISHED Published: 2023-08-14T22:40:40.585Z Last Updated: 2024-10-09T13:18:58.145Z Vendors: Apple Products: macOS Problem Types: Processing an image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670
CVE ID: CVE-2023-27940 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T18:43:50.693Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: A sandboxed app may be able to observe system-wide network connections Description: The issue was addressed with additional permissions checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, macOS Ventura 13.4. A sandboxed app may be able to observe system-wide network connections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213759 - https://support.apple.com/en-us/HT213765
CVE ID: CVE-2023-27941 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:54:35.652Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An app may be able to disclose kernel memory Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support
m/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27942 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:19:22.843Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app may be able to access user-sensitive data Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT21
tps://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27943 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:50:46.074Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: Files downloaded from the internet may not have the quarantine flag applied Description: This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Files downloaded from the internet may not have the quarantine flag applied. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676
CVE ID: CVE-2023-27944 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T19:52:12.666Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-27945 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:16:00.740Z Vendors: Apple Products: macOS, Xcode Problem Types: A sandboxed app may be able to collect system logs Description: This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213759 - https://support.apple.com/en-us/HT213679 - https://support.apple.com/en-us/HT213760
CVE ID: CVE-2023-27946 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:04:08.943Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.co
tion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-27947 State: PUBLISHED Published: 2023-08-14T22:40:28.046Z Last Updated: 2024-10-09T14:10:01.312Z Vendors: Apple Products: macOS Problem Types: Processing an image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670