deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4675
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93849; http://www.securitytracker.com/id/1037086; https://support.apple.com/HT207269
CVE: CVE-2016-4677
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93853; http://www.securitytracker.com/id/1037087; https://support.apple.com/HT207270
CVE: CVE-2016-4678
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleSMC" component. It allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/93852; http://www.securitytracker.com/id/1037086; https://support.apple.com/HT207275
CVE: CVE-2016-4679
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libarchive" component, which allows remote attackers to write to arbitrary files via a crafted archive containing a symlink.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.securityfocus.com/bid/93849; http://www.securitytracker.com/id/1037086; https://support.apple.com/HT207269
CVE: CVE-2016-4680
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/93854; http://www.securitytracker.com/id/1037088; https://support.apple.com/HT207269
CVE: CVE-2016-4681
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94431; https://support.apple.com/HT207275; http://www.securityfocus.com/bid/94431
CVE: CVE-2016-4682
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted SGI file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/93852; http://www.securitytracker.com/id/1037086; https://support.apple.com/HT207170
CVE: CVE-2016-4683
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted SGI file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94431; https://support.apple.com/HT207275; http://www.securityfocus.com/bid/94431
CVE: CVE-2016-4685
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: http://www.securityfocus.com/bid/94432; https://support.apple.com/HT207271; http://www.securityfocus.com/bid/94432
CVE: CVE-2016-4686
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93848; http://www.securitytracker.com/id/1037088; https://support.apple.com/HT207271
CVE: CVE-2016-4688
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted font.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94572; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207269
CVE: CVE-2016-4689
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Mail" component, which does not alert the user to an S/MIME email signature that used a revoked certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-4690
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Image Capture" component, which allows attackers to execute arbitrary code via a crafted USB HID device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-4691
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-4692
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-4693
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which makes it easier for attackers to bypass cryptographic protection mechanisms by leveraging use of the 3DES cipher.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-4721
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "IDS - Connectivity" component, which allows man-in-the-middle attackers to spoof calls via a "switch caller" notification.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94429; https://support.apple.com/HT207271; https://support.apple.com/HT207275
CVE: CVE-2016-4743
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-4764
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94430; https://support.apple.com/HT207142; https://support.apple.com/HT207143
CVE: CVE-2016-4780
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Thunderbolt" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://support.apple.com/HT207275; https://support.apple.com/HT207275
CVE: CVE-2016-4781
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "SpringBoard" component, which allows physically proximate attackers to bypass the passcode attempt counter and unlock a device via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-7577
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94429; https://support.apple.com/HT207271; https://support.apple.com/HT207275
CVE: CVE-2016-7578
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93949; http://www.securitytracker.com/id/1037139; https://support.apple.com/HT207270
CVE: CVE-2016-7579
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "CFNetwork Proxies" component, which allows man-in-the-middle attackers to spoof a proxy password authentication requirement and obtain sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/93856; http://www.securitytracker.com/id/1037086; https://support.apple.com/HT207270
CVE: CVE-2016-7580
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Mail" component, which allows remote web servers to cause a denial of service via a crafted URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94434; https://support.apple.com/HT207170; http://www.securityfocus.com/bid/94434
CVE: CVE-2016-7581
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Safari" component, which allows remote web servers to cause a denial of service via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94432; https://support.apple.com/HT207271; http://www.securityfocus.com/bid/94432
CVE: CVE-2016-7582
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94435; https://support.apple.com/HT207170; http://www.securityfocus.com/bid/94435
CVE: CVE-2016-7583
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iCloud before 6.0.1 is affected. The issue involves the setup subsystem in the "iCloud" component. It allows local users to gain privileges via a crafted dynamic library in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94570; https://support.apple.com/HT207273; http://www.securityfocus.com/bid/94570
CVE: CVE-2016-7584
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "AppleMobileFileIntegrity" component, which allows remote attackers to spoof signed code by using a matching team ID.
CVSS Score: 7.8 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94571; https://support.apple.com/HT207269; https://support.apple.com/HT207270
CVE: CVE-2016-7586
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7587
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7588
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreMedia Playback" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted MP4 file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7589
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94908; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7591
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7592
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component, which allows remote attackers to obtain sensitive information via crafted JavaScript prompts on a web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94909; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7594
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7595
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94905; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207422
CVE: CVE-2016-7596
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7597
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "SpringBoard" component, which allows physically proximate attackers to maintain the unlocked state via vectors related to Handoff with Siri.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-7598
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7599
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site that uses HTTP redirects.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94907; http://www.securitytracker.com/id/1037459; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2016-7600
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "OpenPAM" component, which allows local users to obtain sensitive information by leveraging mishandling of failed PAM authentication by a sandboxed app.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7601
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Local Authentication" component, which does not honor the configured screen-lock time interval if the Touch ID prompt is visible.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/94850; http://www.securitytracker.com/id/1037429; https://support.apple.com/HT207422
CVE: CVE-2016-7602
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7603
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "CoreStorage" component. It allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7604
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "CoreCapture" component. It allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423
CVE: CVE-2016-7605
Published: 2017-02-20
Description: An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/94903; http://www.securitytracker.com/id/1037469; https://support.apple.com/HT207423