deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4193
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107135; http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849
CVE: CVE-2018-4196
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849; http://www.securitytracker.com/id/1041027
CVE: CVE-2018-4198
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "UIKit" component. It allows remote attackers to cause a denial of service via a crafted text file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848; https://support.apple.com/HT208849
CVE: CVE-2018-4199
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041029; https://security.gentoo.org/glsa/201808-04; https://support.apple.com/HT208848
CVE: CVE-2018-4200
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/103961; http://www.securitytracker.com/id/1040743; https://bugs.chromium.org/p/project-zero/issues/detail?id=1525
CVE: CVE-2018-4201
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041029; https://security.gentoo.org/glsa/201808-04; https://support.apple.com/HT208848
CVE: CVE-2018-4202
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "iBooks" component. It allows man-in-the-middle attackers to spoof a password prompt.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104897; http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848
CVE: CVE-2018-4204
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103961; http://www.securitytracker.com/id/1040743; https://security.gentoo.org/glsa/201808-04
CVE: CVE-2018-4205
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104358; http://www.securitytracker.com/id/1041029; https://support.apple.com/HT208854
CVE: CVE-2018-4206
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103957; http://www.securityfocus.com/bid/103958; http://www.securitytracker.com/id/1040744
CVE: CVE-2018-4211
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848; https://support.apple.com/HT208849
CVE: CVE-2018-4214
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to cause a denial of service (memory corruption and Safari crash) or possibly have unspecified other impact via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041029; https://security.gentoo.org/glsa/201808-04; https://support.apple.com/HT208848
CVE: CVE-2018-4215
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041031; https://support.apple.com/HT208848; http://www.securitytracker.com/id/1041031
CVE: CVE-2018-4218
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers an @generatorState use-after-free.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1041029; https://bugs.chromium.org/p/project-zero/issues/detail?id=1553; https://security.gentoo.org/glsa/201808-04
CVE: CVE-2018-4219
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "ATS" component. It allows attackers to gain privileges via a crafted app that leverages type confusion.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849; http://www.securitytracker.com/id/1041027
CVE: CVE-2018-4220
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. Swift before 4.1.1 Security Update 2018-001 is affected. The issue involves the "Swift for Ubuntu" component. It allows attackers to execute arbitrary code in a privileged context because write and execute permissions are enabled during library loading.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/104085; https://support.apple.com/HT208804; http://www.securityfocus.com/bid/104085
CVE: CVE-2018-4221
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104897; http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848
CVE: CVE-2018-4222
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a getWasmBufferFromValue out-of-bounds read during WebAssembly compilation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securitytracker.com/id/1041029; https://bugs.chromium.org/p/project-zero/issues/detail?id=1545; https://security.gentoo.org/glsa/201808-04
CVE: CVE-2018-4223
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of a persistent account identifier.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848; https://support.apple.com/HT208849
CVE: CVE-2018-4224
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of a persistent device identifier.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104378; http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848
CVE: CVE-2018-4225
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on Keychain state modifications.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104889; http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848
CVE: CVE-2018-4226
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104888; http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848
CVE: CVE-2018-4227
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Mail" component. It allows remote attackers to read the cleartext content of S/MIME encrypted messages via direct exfiltration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: http://www.securityfocus.com/bid/104897; http://www.securitytracker.com/id/1041027; https://efail.de/#cve
CVE: CVE-2018-4228
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOFireWireAVC" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages a race condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849; http://www.securitytracker.com/id/1041027
CVE: CVE-2018-4229
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists.
CVSS Score: 10.0 (CRITICAL)
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849; http://www.securitytracker.com/id/1041027
CVE: CVE-2018-4230
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that triggers a SetAppSupportBits use-after-free because of a race condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securitytracker.com/id/1041027; https://bugs.chromium.org/p/project-zero/issues/detail?id=1549; https://support.apple.com/HT208849
CVE: CVE-2018-4232
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to overwrite cookies via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securitytracker.com/id/1041029; https://security.gentoo.org/glsa/201808-04; https://support.apple.com/HT208848
CVE: CVE-2018-4233
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html; http://www.securitytracker.com/id/1041029; https://security.gentoo.org/glsa/201808-04
CVE: CVE-2018-4234
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849; http://www.securitytracker.com/id/1041027
CVE: CVE-2018-4235
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks via an unspecified injection.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-74
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848; https://support.apple.com/HT208849
CVE: CVE-2018-4236
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849; http://www.securitytracker.com/id/1041027
CVE: CVE-2018-4237
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a logic error.
CVSS Score: 7.8 (HIGH)
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848; https://support.apple.com/HT208849
CVE: CVE-2018-4238
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri.
CVSS Score: 2.4 (LOW)
CWE: CWE-732
References: http://www.securitytracker.com/id/1041031; https://support.apple.com/HT208848; http://www.securitytracker.com/id/1041031
CVE: CVE-2018-4239
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041031; https://support.apple.com/HT208848; http://www.securitytracker.com/id/1041031
CVE: CVE-2018-4240
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208848; https://support.apple.com/HT208849
CVE: CVE-2018-4241
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041027; https://bugs.chromium.org/p/project-zero/issues/detail?id=1558; https://support.apple.com/HT208848
CVE: CVE-2018-4242
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041027; http://www.securitytracker.com/id/1042004; https://support.apple.com/HT208849
CVE: CVE-2018-4243
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1041027; https://bugs.chromium.org/p/project-zero/issues/detail?id=1564; https://support.apple.com/HT208848
CVE: CVE-2018-4244
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri Contacts" component. It allows physically proximate attackers to discover private contact information via Siri.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041031; https://support.apple.com/HT208848; http://www.securitytracker.com/id/1041031
CVE: CVE-2018-4246
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.securitytracker.com/id/1041029; https://support.apple.com/HT208848; https://support.apple.com/HT208850
CVE: CVE-2018-4247
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104366; http://www.securitytracker.com/id/1041029; https://support.apple.com/HT208848
CVE: CVE-2018-4249
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglr_ipfilter_input in com.apple.packet-mangler in the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow and stack-based buffer overflow) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://packetstormsecurity.com/files/172828/Apple-packet-mangler-Remote-Code-Execution.html; http://www.securitytracker.com/id/1041027; https://lgtm.com/blog/apple_xnu_packet_mangler_CVE-2017-13904
CVE: CVE-2018-4250
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041031; https://support.apple.com/HT208848; http://www.securitytracker.com/id/1041031
CVE: CVE-2018-4251
Published: 2018-06-08
Description: An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: http://seclists.org/fulldisclosure/2019/Mar/45; http://www.securitytracker.com/id/1041027; https://support.apple.com/HT208849