Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-4195 State: PUBLISHED Published: 2019-04-03T17:43:12 Last Updated: 2024-08-05T05:04:29.827Z Vendors: n/a Products: Safari Problem Types: Visiting a malicious website by clicking a link may lead to user interface spoofing Description: An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT209109
CVE ID: CVE-2018-4196 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4197 State: PUBLISHED Published: 2019-04-03T17:43:12 Last Updated: 2024-08-05T05:04:29.970Z Vendors: n/a Products: iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT209141 - https://support.apple.com/kb/HT209140 - https://support.apple.com/kb/HT209107 - https://support.apple.com/kb/HT2
09141 - https://support.apple.com/kb/HT209140 - https://support.apple.com/kb/HT209107 - https://support.apple.com/kb/HT209106 - https://support.apple.com/kb/HT209109
CVE ID: CVE-2018-4198 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "UIKit" component. It allows remote attackers to cause a denial of service via a crafted text file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://sup
upport.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4199 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://su
b site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://usn.ubuntu.com/3687-1/ - https://support.apple.com/HT208848 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4200 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free. Additional Analyst Notes: - CVE Program Co
web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208741 - http://www.securitytracker.com/id/1040743 - https://support.apple.com/HT208853 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208743 - https://usn.ubuntu.com/3640-1/ - http://www.securityfocus.com/bid/103961 - https://www.exploit-db.com/exploits/44566/ - https://support.apple.com/HT208852 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1525
CVE ID: CVE-2018-4201 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://sup
application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://support.apple.com/HT208848 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4202 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "iBooks" component. It allows man-in-the-middle attackers to spoof a password prompt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - http://www.securityfocus.com/bid/104897 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4203 State: PUBLISHED Published: 2019-04-03T17:43:12 Last Updated: 2024-08-05T05:04:29.922Z Vendors: n/a Products: iOS, macOS, tvOS, watchOS Problem Types: An application may be able to read restricted memory Description: An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT209107 - https://support.apple.com/kb/HT209193 - https://support.apple.com/kb/HT209106 - https://support.apple.com/kb/HT209139 - https://support.apple.com/kb/HT209108
CVE ID: CVE-2018-4204 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:30.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.
ication crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208741 - http://www.securitytracker.com/id/1040743 - https://support.apple.com/HT208853 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208743 - http://www.securityfocus.com/bid/103961 - https://support.apple.com/HT208848 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4205 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - http://www.securityfocus.com/bid/104358
CVE ID: CVE-2018-4206 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.c
ional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1040744 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1529 - https://support.apple.com/HT208743 - http://www.securityfocus.com/bid/103957 - https://support.apple.com/HT208742 - http://www.securityfocus.com/bid/103958 - https://www.exploit-db.com/exploits/44562/
CVE ID: CVE-2018-4207 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:04:29.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208695%2C - https://support.apple.com/HT208697%2C - https://support.apple.com/HT208696%2C - https://usn.ubuntu.com/3781-1/ - https://support.apple.com/HT208698%2C - https://security.gentoo.org/glsa/20
208696%2C - https://usn.ubuntu.com/3781-1/ - https://support.apple.com/HT208698%2C - https://security.gentoo.org/glsa/201812-04 - https://support.apple.com/HT208694 - https://support.apple.com/HT208693%2C
CVE ID: CVE-2018-4208 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:04:29.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208695%2C - https://support.apple.com/HT208694%2C - https://support.apple.com/HT208697%2C - https://support.apple.com/HT208696 - https://usn.ubuntu.com/3781-1/ - https://support.apple.com/HT208698%2C
208697%2C - https://support.apple.com/HT208696 - https://usn.ubuntu.com/3781-1/ - https://support.apple.com/HT208698%2C - https://security.gentoo.org/glsa/201812-04 - https://support.apple.com/HT208693%2C
CVE ID: CVE-2018-4209 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:04:29.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208695%2C - https://support.apple.com/HT208697%2C - https://support.apple.com/HT208696%2C - https://usn.ubuntu.com/3781-1/ - https://support.apple.com/HT208698%2C - https://security.gentoo.org/glsa/20
CVE ID: CVE-2018-4210 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:04:29.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208695%2C - https://support.apple.com/HT208694%2C - https://support.apple.com/HT208698 - https://usn.ubuntu.com/3781-1/ - https://security.gentoo.org/glsa/201812-04 - https://support.apple.com/HT208
HT208698 - https://usn.ubuntu.com/3781-1/ - https://security.gentoo.org/glsa/201812-04 - https://support.apple.com/HT208693%2C
CVE ID: CVE-2018-4211 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.security
m Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4212 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:04:29.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208695%2C - https://support.apple.com/HT208697%2C - https://support.apple.com/HT208696%2C - https://usn.ubuntu.com/3781-1/ - https://support.apple.com/HT208698%2C - https://security.gentoo.org/glsa/20
CVE ID: CVE-2018-4213 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:04:29.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208695%2C - https://support.apple.com/HT208697%2C - https://support.apple.com/HT208693%2Chttps://support.apple.com/HT208698%2C - https://support.apple.com/HT208696%2C - https://usn.ubuntu.com/3781-1/
208693%2Chttps://support.apple.com/HT208698%2C - https://support.apple.com/HT208696%2C - https://usn.ubuntu.com/3781-1/ - https://security.gentoo.org/glsa/201812-04 - https://support.apple.com/HT208694
CVE ID: CVE-2018-4214 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to cause a denial of service (memory corruption and Safari crash) or possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: -
have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://support.apple.com/HT208848 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4215 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041031 - https://support.apple.com/HT208848
CVE ID: CVE-2018-4216 State: PUBLISHED Published: 2019-04-03T17:43:12 Last Updated: 2024-08-05T05:04:29.903Z Vendors: n/a Products: iOS Problem Types: A malicious application may be able to bypass the call confirmation prompt Description: A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT208938
CVE ID: CVE-2018-4217 State: PUBLISHED Published: 2019-01-11T18:00:00 Last Updated: 2024-08-05T05:04:29.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208849
CVE ID: CVE-2018-4218 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers an @generatorState use-after-free. Additional Analyst Notes: -
application crash) via a crafted web site that triggers an @generatorState use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://www.exploit-db.com/exploits/44861/ - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://usn.ubuntu.com/3687-1/ - https://support.apple.com/HT208848 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1553 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4219 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:30.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "ATS" component. It allows attackers to gain privileges via a crafted app that leverages type confusion. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4220 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. Swift before 4.1.1 Security Update 2018-001 is affected. The issue involves the "Swift for Ubuntu" component. It allows attackers to execute arbitrary code in a privileged context because write and execute permissions are enabled during library loading. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208804 - http://www.securityfocus.com/bid/104085
CVE ID: CVE-2018-4221 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:30.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041027 - http://www.securityfocus.com/bid/104897 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849
CVE ID: CVE-2018-4222 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a getWasmBufferFromValue out-of-bounds read during WebAssembly compilation. Additional Analyst Notes: - CVE Program Container: Refere
erFromValue out-of-bounds read during WebAssembly compilation. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://www.exploit-db.com/exploits/44859/ - https://bugs.chromium.org/p/project-zero/issues/detail?id=1545 - https://support.apple.com/HT208853 - https://support.apple.com/HT208851 - https://security.gentoo.org/glsa/201808-04 - https://support.apple.com/HT208854 - http://www.securitytracker.com/id/1041029 - https://usn.ubuntu.com/3687-1/ - https://support.apple.com/HT208848 - https://support.apple.com/HT208852
CVE ID: CVE-2018-4223 State: PUBLISHED Published: 2018-06-08T18:00:00 Last Updated: 2024-08-05T05:04:29.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of a persistent account identifier. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple
le.com/HT208850 - https://support.apple.com/HT208851 - http://www.securitytracker.com/id/1041027 - https://support.apple.com/HT208848 - https://support.apple.com/HT208849