deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-2416
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://blog.flanker017.me/cve-2017-2416-gif-remote-exec/
CVE: CVE-2017-2417
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to cause a denial of service (infinite recursion) via a crafted image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2418
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Hypervisor" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2419
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/97129; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2420
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2421
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "AppleGraphicsPowerManagement" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2422
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2423
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with an empty signature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: http://www.securityfocus.com/bid/97147; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2424
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97129; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201709-03
CVE: CVE-2017-2425
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "SecurityFoundation" component. A double free vulnerability allows remote attackers to execute arbitrary code via a crafted certificate.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2426
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "iBooks" component. It allows remote attackers to obtain sensitive information from local files via a file: URL in an iBooks file.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://s1gnalcha0s.github.io/ibooks/epub/2017/03/27/This-book-reads-you-using-JavaScript.html
CVE: CVE-2017-2427
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2428
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component. It allows remote HTTP/2 servers to have an unspecified impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/97146; http://www.securitytracker.com/id/1038138; https://github.com/nghttp2/nghttp2/releases/tag/v1.17.0
CVE: CVE-2017-2429
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "FinderKit" component. It allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging unexpected permission changes during an iCloud Sharing Send Link action.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2430
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2431
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "CoreMedia" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .mov file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2432
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2433
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97129; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2434
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "HomeKit" component. It allows attackers to have an unspecified impact by leveraging the presence of Home Control on Control Center.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97138; http://www.securitytracker.com/id/1038139; https://support.apple.com/HT207617
CVE: CVE-2017-2435
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2436
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireAVC" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2437
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireAVC" component. It allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2438
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "AppleRAID" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2439
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2440
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2441
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "libc++abi" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted C++ app that is mishandled during demangling.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2442
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97129; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2443
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2444
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97131; http://www.securitytracker.com/id/1038137; https://support.apple.com/HT207600
CVE: CVE-2017-2445
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted frame objects.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2446
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of strict mode functions.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1032
CVE: CVE-2017-2447
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2448
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the "Keychain" component. It allows man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging lack of authentication for OTR packets.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97134; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2449
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/97140; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207615
CVE: CVE-2017-2450
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2451
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2452
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to read text messages on the lock screen via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97138; http://www.securitytracker.com/id/1038139; https://support.apple.com/HT207617
CVE: CVE-2017-2453
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof FaceTime prompts in the user interface via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97129; http://www.securitytracker.com/id/1038137; https://support.apple.com/HT207600
CVE: CVE-2017-2454
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1080
CVE: CVE-2017-2455
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1082
CVE: CVE-2017-2456
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://bugs.chromium.org/p/project-zero/issues/detail?id=1083
CVE: CVE-2017-2457
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97147; http://www.securitytracker.com/id/1038138; https://security.gentoo.org/glsa/201706-15
CVE: CVE-2017-2458
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Keyboards" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97137; http://www.securitytracker.com/id/1038138; https://support.apple.com/HT207601
CVE: CVE-2017-2459
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1087
CVE: CVE-2017-2460
Published: 2017-04-02
Description: An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97130; http://www.securitytracker.com/id/1038137; https://bugs.chromium.org/p/project-zero/issues/detail?id=1090