rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-4282 
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: n/a
product: iOS, tvOS, watchOS
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4283 
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4284 
A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4285 
A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: A malicious application may be able to gain root privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:13.000Z
CVE-2018-4286 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T00:00:00.000Z
CVE-2018-4287 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T00:00:00.000Z
CVE-2018-4288 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T00:00:00.000Z
CVE-2018-4289 
An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4290 
A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2.
Problem types: description: Processing an emoji under certain configurations may lead to a denial of service
Affected products: vendor: n/a
product: iOS, watchOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4291 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
Problem types: description: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T00:00:00.000Z
CVE-2018-4293 
A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
Problem types: description: Cookies may unexpectedly persist in Safari
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4295 
An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: A remote attacker may be able to attack AFP servers through HTTP clients
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4296 
This issue is fixed in macOS Mojave 10.14. A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.
Problem types: description: Description: A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks.
Affected products: vendor: Apple
product: macOS
Published: 2020-10-27T19:16:56.000Z
CVE-2018-4298 
In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4299 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4300 
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.
Problem types: description: A maliciously crafted web site or local HTML file might be able to collect sanitized job and printer status information without the knowledge of the user
Affected products: vendor: n/a
product: CUPS
Published: 2019-04-03T17:54:23.000Z
CVE-2018-4301 
This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp.
Problem types: description: A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp
Affected products: vendor: Apple
product: Smart Card Services
Published: 2025-01-07T23:26:58.979Z
CVE-2018-4302 
A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.
Problem types: description: Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: macOS
Published: 2021-12-23T19:48:29.000Z
CVE-2018-4303 
An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14, iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: n/a
product: macOS, iOS, tvOS, watchOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4304 
A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: Processing a maliciously crafted text file may lead to a denial of service
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4305 
An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.
Problem types: description: An attacker in a privileged network position may be able to spoof password prompts in the iTunes Store
Affected products: vendor: n/a
product: iOS, tvOS, watchOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4306 
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4307 
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12, Safari 12.
Problem types: description: A malicious website may be able to exfiltrate autofilled data in Safari
Affected products: vendor: n/a
product: iOS, Safari
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4308 
An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4309 
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: A malicious website may be able to execute scripts in the context of another website
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4310 
An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
Problem types: description: A sandboxed process may be able to circumvent sandbox restrictions
Affected products: vendor: n/a
product: iOS, macOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4311 
The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Cross-origin SecurityErrors includes the accessed frame’s origin
Affected products: vendor: n/a
product: iOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4312 
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4313 
A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.
Problem types: description: A local user may be able to discover a user’s deleted messages
Affected products: vendor: n/a
product: iOS, tvOS, watchOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4314 
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4315 
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4316 
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4317 
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4318 
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4319 
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: A malicious website may cause unexepected cross-origin behavior
Affected products: vendor: n/a
product: iOS, watchOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4321 
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12.
Problem types: description: A malicious application may be able to access local users AppleIDs
Affected products: vendor: n/a
product: iOS, macOS, tvOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4322 
This issue was addressed with improved entitlements. This issue affected versions prior to iOS 12.
Problem types: description: A local app may be able to read a persistent account identifier
Affected products: vendor: n/a
product: iOS
Published: 2019-04-03T17:43:14.000Z
CVE-2018-4323 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4324 
A permissions issue existed in the handling of the Apple ID. This issue was addressed with improved access controls. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: A malicious application may be able to determine the Apple ID of the owner of the computer
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4325 
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.
Problem types: description: A person with physical access to an iOSdevice may be able to determine the last used app from the lock screen
Affected products: vendor: n/a
product: iOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4326 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4327 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: iOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4328 
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4329 
Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12.
Problem types: description: A user may be unable to delete browsing history items
Affected products: vendor: n/a
product: iOS, Safari
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4330 
In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-11T18:00:00.000Z
CVE-2018-4331 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4332 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4333 
A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12, macOS Mojave 10.14.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: n/a
product: iOS, macOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4334 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4335 
A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: n/a
product: iOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4336 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4337 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4338 
A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4339 
This issue was addressed with a new entitlement. This issue is fixed in iOS 12.1. A local user may be able to read a persistent device identifier.
Problem types: description: A local user may be able to read a persistent device identifier
Affected products: vendor: Apple
product: iOS
Published: 2020-10-27T19:18:22.000Z
CVE-2018-4340 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4341 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: A malicious application may be able to break out of its sandbox
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4342 
A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1.
Problem types: description: A local user may be able to modify protected parts of the file system
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4343 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4344 
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4345 
A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: A malicious website may exfiltrate image data cross-origin
Affected products: vendor: n/a
product: iOS, tvOS, Safari,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4346 
A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: Parsing a maliciously crafted dictionary file may lead to disclosure of user information
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4347 
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.
Problem types: description: Processing a maliciously crafted text file may lead to arbitrary code execution
Affected products: vendor: n/a
product: iOS, macOS, tvOS, watchOS,  iTunes for Windows, iCloud for Windows
Published: 2019-04-03T17:43:15.000Z
CVE-2018-4348 
A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14.
Problem types: description: A local user may be able to cause a denial of service
Affected products: vendor: n/a
product: macOS
Published: 2019-04-03T17:43:15.000Z