deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7606
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7607
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component, which allows attackers to obtain sensitive information from kernel memory via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7608
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireFamily" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7609
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "AppleGraphicsPowerManagement" component. It allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7610
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7611
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7612
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7613
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages object-lifetime mishandling during process spawning.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94116; https://support.apple.com/HT207269; https://support.apple.com/HT207270
CVE: CVE-2016-7614
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94911; https://support.apple.com/HT207424; http://www.securityfocus.com/bid/94911
CVE: CVE-2016-7615
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component, which allows local users to cause a denial of service via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7616
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Disk Images" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7617
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (type confusion) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7618
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .gcx file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7619
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "libarchive" component, which allows local users to write to arbitrary files via vectors related to symlinks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7620
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOSurface" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7621
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7622
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Grapher" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .gcx file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7623
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94913; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7624
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7625
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOKit" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7626
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted certificate profile.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94852; http://www.securitytracker.com/id/1037429; https://lists.apple.com/archives/security-announce/2016/Dec/msg00001.html
CVE: CVE-2016-7627
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreGraphics" component. It allows attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted font.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7628
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Assets" component, which allows local users to bypass intended permission restrictions and change a downloaded mobile asset via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7629
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7630
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "WebSheet" component, which allows attackers to bypass a sandbox protection mechanism via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: https://support.apple.com/HT207422; https://support.apple.com/HT207422
CVE: CVE-2016-7632
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7633
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Directory Services" component. It allows local users to gain privileges or cause a denial of service (use-after-free) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7634
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-7635
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7636
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows man-in-the-middle attackers to cause a denial of service (application crash) via vectors related to OCSP responder URLs.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7637
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7638
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Find My iPhone" component, which allows physically proximate attackers to disable this component by bypassing authentication.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-7639
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7640
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7641
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7642
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7643
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) via a crafted web site.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7644
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/94904; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7645
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7646
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7648
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7649
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7650
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "Safari Reader" component, which allows remote attackers to conduct UXSS attacks via a crafted web site.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/94915; http://www.securitytracker.com/id/1037459; https://support.apple.com/HT207421
CVE: CVE-2016-7651
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. watchOS before 3.1.1 is affected. The issue involves the "Accounts" component, which allows local users to bypass intended authorization restrictions by leveraging the mishandling of an app uninstall.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: http://www.securityfocus.com/bid/94851; http://www.securitytracker.com/id/1037429; https://lists.apple.com/archives/security-announce/2016/Dec/msg00001.html
CVE: CVE-2016-7652
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7653
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Media Player" component, which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging lockscreen access.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422