deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-2516
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; https://www.exploit-db.com/exploits/42047/
CVE: CVE-2017-2518
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted SQL statement.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/98468; http://www.securitytracker.com/id/1038484; https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html
CVE: CVE-2017-2519
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SQL statement.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/98468; http://www.securitytracker.com/id/1038484; https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html
CVE: CVE-2017-2520
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted SQL statement.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/98468; http://www.securitytracker.com/id/1038484; https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html
CVE: CVE-2017-2521
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98456; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2522
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98588; https://support.apple.com/HT207797; https://support.apple.com/HT207798
CVE: CVE-2017-2523
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98584; https://support.apple.com/HT207797; https://support.apple.com/HT207798
CVE: CVE-2017-2524
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "TextInput" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98468; http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797
CVE: CVE-2017-2525
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98473; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2526
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98474; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2527
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "CoreAnimation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via crafted data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; https://www.exploit-db.com/exploits/42052/
CVE: CVE-2017-2528
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with cached frames.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98474; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2530
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98455; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2531
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98473; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2533
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securitytracker.com/id/1038484; http://www.zerodayinitiative.com/advisories/ZDI-17-357/; https://phoenhex.re/2017-06-09/pwn2own-diskarbitrationd-privesc
CVE: CVE-2017-2534
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app.
CVSS Score: 8.6 (HIGH)
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2535
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Security" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (resource consumption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-400
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2536
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98473; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2537
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2538
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98474; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201709-03
CVE: CVE-2017-2539
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98474; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2540
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2541
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2542
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2543
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2544
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98474; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2545
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2546
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2547
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98474; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2548
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-2549
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with frame loading.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98473; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-6977
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 8.6 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-6978
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; https://www.exploit-db.com/exploits/42056/
CVE: CVE-2017-6979
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "IOSurface" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/98468; http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797
CVE: CVE-2017-6980
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98473; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-6981
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; https://support.apple.com/HT207798
CVE: CVE-2017-6982
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Notifications" component. It allows attackers to cause a denial of service via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98479; http://www.securitytracker.com/id/1038485; https://support.apple.com/HT207798
CVE: CVE-2017-6983
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://source.android.com/security/bulletin/2017-09-01; https://support.apple.com/HT207797
CVE: CVE-2017-6984
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98454; http://www.securitytracker.com/id/1038487; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-6985
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-6986
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-6987
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98468; http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797
CVE: CVE-2017-6988
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS certificate validation mishandles certificate changes.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-6989
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038485; https://support.apple.com/HT207798; https://support.apple.com/HT207800
CVE: CVE-2017-6990
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "HFS" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; http://www.securitytracker.com/id/1038484
CVE: CVE-2017-6991
Published: 2017-05-22
Description: An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1038484; https://support.apple.com/HT207797; https://support.apple.com/HT207798