rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-4220 
An issue was discovered in certain Apple products. Swift before 4.1.1 Security Update 2018-001 is affected. The issue involves the "Swift for Ubuntu" component. It allows attackers to execute arbitrary code in a privileged context because write and execute permissions are enabled during library loading.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4221 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4222 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages a getWasmBufferFromValue out-of-bounds read during WebAssembly compilation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4223 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of a persistent account identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4224 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of a persistent device identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4225 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on Keychain state modifications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4226 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local users to bypass intended restrictions on the reading of sensitive user information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4227 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Mail" component. It allows remote attackers to read the cleartext content of S/MIME encrypted messages via direct exfiltration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4228 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOFireWireAVC" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages a race condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4229 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4230 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that triggers a SetAppSupportBits use-after-free because of a race condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4232 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to overwrite cookies via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4233 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4234 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4235 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows local users to perform impersonation attacks via an unspecified injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4236 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOGraphics" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4237 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a logic error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4238 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4239 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Magnifier" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and see the most recent Magnifier image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4240 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4241 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4242 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Hypervisor" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4243 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to execute arbitrary code in a privileged context via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4244 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri Contacts" component. It allows physically proximate attackers to discover private contact information via Siri.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4246 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4247 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4248 
An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.
Problem types: description: A malicious application may be able to read restricted memory
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:12.000Z
CVE-2018-4249 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglr_ipfilter_input in com.apple.packet-mangler in the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow and stack-based buffer overflow) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T00:00:00.000Z
CVE-2018-4250 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4251 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4252 
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and obtain private notification content via Siri.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4253 
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read of kernel memory) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-08T18:00:00.000Z
CVE-2018-4254 
In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4255 
In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4256 
In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4257 
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4258 
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4259 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T00:00:00.000Z
CVE-2018-4260 
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
Problem types: description: Visiting a malicious website may lead to address bar spoofing
Affected products: vendor: n/a
product: iOS, Safari
Published: 2019-04-03T17:43:12.000Z
CVE-2018-4261 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4262 
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memory corruption issues were addressed with improved memory handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4263 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4264 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4265 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4266 
A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: A malicious website may be able to cause a denial of service
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4267 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4268 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4269 
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: A malicious application may be able to break out of its sandbox
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4270 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to an unexpected Safari crash
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4271 
Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to an unexpected Safari crash
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4272 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4273 
Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to an unexpected Safari crash
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4274 
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
Problem types: description: Visiting a malicious website may lead to address bar spoofing
Affected products: vendor: n/a
product: iOS, Safari
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4275 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
Problem types: description: A malicious application may be able to break out of its sandbox
Affected products: vendor: n/a
product: iOS
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4276 
A null pointer dereference was addressed with improved validation. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: An attacker in a privileged position may be able to perform a denial of service attack
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4277 
In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4278 
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4279 
An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2.
Problem types: description: Visiting a malicious website may lead to address bar spoofing
Affected products: vendor: n/a
product: Safari
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4280 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4281 
In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z