deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-7003
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT207797; https://support.apple.com/HT207798; https://support.apple.com/HT207800
CVE: CVE-2017-7004
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "Security" component. A race condition allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/HT207797; https://support.apple.com/HT207798; https://www.exploit-db.com/exploits/42145/
CVE: CVE-2017-7005
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/Quindecim/Orbis-Exploit-5.x; https://support.apple.com/HT207798; https://support.apple.com/HT207801
CVE: CVE-2017-7065
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the "Wi-Fi" component. It allows remote attackers to execute arbitrary code (on the Wi-Fi chip) or cause a denial of service (memory corruption) by leveraging proximity for 802.11.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100655; https://support.apple.com/HT207922; https://support.apple.com/HT207923
CVE: CVE-2017-7066
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. tvOS before 10.2.2 is affected. The issue involves the "Wi-Fi" component. It allows attackers to cause a denial of service (memory corruption on the Wi-Fi chip) by leveraging proximity for 802.11.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/HT207923; https://support.apple.com/HT207924; https://support.apple.com/HT207923
CVE: CVE-2017-7070
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Kernel" component. It allows physically proximate attackers to bypass the screen-locking protection mechanism that should have been in place upon closing the lid.
CVSS Score: 6.8 (MEDIUM)
References: https://support.apple.com/HT207615; https://support.apple.com/HT207615
CVE: CVE-2017-7071
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100613; https://support.apple.com/HT207600; http://www.securityfocus.com/bid/100613
CVE: CVE-2017-7075
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Notes" component. It allows local users to obtain sensitive information by reading search results that contain locked-note content.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/HT208112; https://support.apple.com/HT208112
CVE: CVE-2017-7153
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof user-interface information (about whether the entire content is derived from a valid TLS session) via a crafted web site that sends a 401 Unauthorized redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://support.apple.com/HT208324; https://support.apple.com/HT208325; https://support.apple.com/HT208326
CVE: CVE-2017-7161
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://support.apple.com/HT208324; https://usn.ubuntu.com/3551-1/; https://support.apple.com/HT208324
CVE: CVE-2017-7164
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. The issue involves the "App Store" component. It allows man-in-the-middle attackers to spoof password prompts.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT208327; https://support.apple.com/HT208334; https://support.apple.com/HT208327
CVE: CVE-2017-7165
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208324; https://support.apple.com/HT208325; https://support.apple.com/HT208326
CVE: CVE-2017-7167
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. Xcode before 9.2 is affected. The issue involves the "ld64" component. A buffer overflow allows remote attackers to execute arbitrary code via crafted source code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208456; https://support.apple.com/HT208456
CVE: CVE-2017-7170
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Security" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT208221; https://support.apple.com/HT208221
CVE: CVE-2017-7171
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "CoreAnimation" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208325; https://support.apple.com/HT208327; https://support.apple.com/HT208331
CVE: CVE-2017-7172
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "CFNetwork Session" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208325; https://support.apple.com/HT208326; https://support.apple.com/HT208327
CVE: CVE-2017-7173
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/HT208331; https://support.apple.com/HT208331
CVE: CVE-2018-4082
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102782; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4083
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar Support" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208465; https://www.exploit-db.com/exploits/44007/; https://support.apple.com/HT208465
CVE: CVE-2018-4084
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Wi-Fi" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102785; http://www.securitytracker.com/id/1040267; https://support.apple.com/HT208465
CVE: CVE-2018-4085
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "QuartzCore" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102782; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4086
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Security" component. It allows remote attackers to spoof certificate validation via crafted name constraints.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.securityfocus.com/bid/102782; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4087
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102774; http://www.securitytracker.com/id/1040265; https://blog.zimperium.com/cve-2018-4087-poc-escaping-sandbox-misleading-bluetoothd/
CVE: CVE-2018-4088
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102775; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040266
CVE: CVE-2018-4089
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102778; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040266
CVE: CVE-2018-4090
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102782; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4091
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Sandbox" component. It allows bypass of a sandbox protection mechanism.
CVSS Score: 10.0 (CRITICAL)
References: http://www.securityfocus.com/bid/102785; http://www.securitytracker.com/id/1040267; https://support.apple.com/HT208465
CVE: CVE-2018-4092
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://www.securityfocus.com/bid/102782; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4093
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102782; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4094
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102782; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4095
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102774; http://www.securitytracker.com/id/1040265; https://blog.zimperium.com/cve-2018-4087-poc-escaping-sandbox-misleading-bluetoothd/
CVE: CVE-2018-4096
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102775; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040266
CVE: CVE-2018-4097
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/102785; http://www.securitytracker.com/id/1040267; https://support.apple.com/HT208465
CVE: CVE-2018-4098
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102785; http://www.securitytracker.com/id/1040267; https://support.apple.com/HT208465
CVE: CVE-2018-4100
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. watchOS before 4.2.2 is affected. The issue involves the "LinkPresentation" component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102772; http://www.securitytracker.com/id/1040265; http://www.securitytracker.com/id/1040267
CVE: CVE-2018-4101
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1040604; https://security.gentoo.org/glsa/201808-04; https://support.apple.com/HT208693
CVE: CVE-2018-4102
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103580; http://www.securitytracker.com/id/1040606; https://support.apple.com/HT208695
CVE: CVE-2018-4104
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1040604; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4105
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "APFS" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4106
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the Bracketed Paste Mode of the "Terminal" component. It allows user-assisted attackers to inject arbitrary commands within pasted content.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4107
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "PDFKit" component. It allows remote attackers to bypass intended restrictions on visiting URLs within a PDF document.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4108
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Management" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4109
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208462; https://support.apple.com/HT208463; https://support.apple.com/HT208464
CVE: CVE-2018-4110
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Web App" component. It allows remote attackers to bypass intended restrictions on cookie persistence.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/103578; http://www.securitytracker.com/id/1040604; https://support.apple.com/HT208693
CVE: CVE-2018-4111
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted message content by sending HTML e-mail that references remote resources but lacks a valid S/MIME signature.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4112
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "ATS" component. It allows attackers to obtain sensitive information by leveraging symlink mishandling.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692