rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-3864 
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.
Problem types: description: A DOM object context may not have had a unique security origin
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows
Published: 2020-10-27T20:10:02.000Z
CVE-2020-3865 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3866 
This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Catalina 10.15.3. Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper.
Problem types: description: Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3867 
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.
Problem types: description: Processing maliciously crafted web content may lead to universal cross site scripting
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3868 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3869 
An issue existed in the handling of the local user's self-view. The issue was corrected with improved logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A remote FaceTime user may be able to cause the local user's camera self-view to display the incorrect camera.
Problem types: description: A remote FaceTime user may be able to cause the local user's camera self-view to display the incorrect camera
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3870 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3871 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3872 
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3873 
This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning off "Load remote content in messages” may not apply to all mail previews.
Problem types: description: Turning off "Load remote content in messages” may not apply to all mail previews
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3874 
An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content.
Problem types: description: Screenshots of the Messages app may reveal additional message content
Affected products: vendor: Apple
product: iOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3875 
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3877 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Problem types: description: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: watchOS
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3878 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-27T20:45:05.000Z
CVE-2020-3880 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T20:42:57.000Z
CVE-2020-3881 
A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to view sensitive user information.
Problem types: description: A local user may be able to view sensitive user information
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:21:41.000Z
CVE-2020-3882 
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.
Problem types: description: Importing a maliciously crafted calendar invitation may exfiltrate user information
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T15:59:04.000Z
CVE-2020-3883 
This issue was addressed with improved checks. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. An application may be able to use arbitrary entitlements.
Problem types: description: An application may be able to use arbitrary entitlements
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-04-01T17:45:03.000Z
CVE-2020-3884 
An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution.
Problem types: description: A remote attacker may be able to cause arbitrary javascript code execution
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:23:00.000Z
CVE-2020-3885 
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.
Problem types: description: A file URL may be incorrectly processed
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:47:27.000Z
CVE-2020-3886 
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2021-12-23T19:48:33.000Z
CVE-2020-3887 
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A download's origin may be incorrectly associated.
Problem types: description: A download's origin may be incorrectly associated
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:47:10.000Z
CVE-2020-3888 
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4. A maliciously crafted page may interfere with other web contexts.
Problem types: description: A maliciously crafted page may interfere with other web contexts
Affected products: vendor: Apple
product: iOS
Published: 2020-04-01T17:46:41.000Z
CVE-2020-3889 
A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to read arbitrary files.
Problem types: description: A local user may be able to read arbitrary files
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:39:32.000Z
CVE-2020-3890 
The issue was addressed with improved deletion. This issue is fixed in iOS 13.4 and iPadOS 13.4. Deleted messages groups may still be suggested as an autocompletion.
Problem types: description: Deleted messages groups may still be suggested as an autocompletion
Affected products: vendor: Apple
product: iOS
Published: 2020-04-01T17:46:55.000Z
CVE-2020-3891 
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled.
Problem types: description: A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: watchOS
Published: 2020-04-01T17:48:23.000Z
CVE-2020-3892 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:49:17.000Z
CVE-2020-3893 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:49:07.000Z
CVE-2020-3894 
A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:49:40.000Z
CVE-2020-3895 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:49:54.000Z
CVE-2020-3896 
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to overwrite arbitrary files.
Problem types: description: A malicious application may be able to overwrite arbitrary files
Affected products: vendor: Apple
product: macOS
Published: 2021-12-23T19:48:32.000Z
CVE-2020-3897 
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
Problem types: description: A remote attacker may be able to cause arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:49:29.000Z
CVE-2020-3898 
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-10-22T17:48:29.000Z
CVE-2020-3899 
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
Problem types: description: A remote attacker may be able to cause arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:49:47.000Z
CVE-2020-3900 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:50:01.000Z
CVE-2020-3901 
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:50:41.000Z
CVE-2020-3902 
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.
Problem types: description: Processing maliciously crafted web content may lead to a cross site scripting attack
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:51:10.000Z
CVE-2020-3903 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.4. An application may be able to execute arbitrary code with system privileges.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:50:19.000Z
CVE-2020-3904 
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:51:22.000Z
CVE-2020-3905 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:52:33.000Z
CVE-2020-3906 
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.4. A maliciously crafted application may be able to bypass code signing enforcement.
Problem types: description: A maliciously crafted application may be able to bypass code signing enforcement
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:50:53.000Z
CVE-2020-3907 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.
Problem types: description: A local user may be able to cause unexpected system termination or read kernel memory
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:51:36.000Z
CVE-2020-3908 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory.
Problem types: description: A local user may be able to cause unexpected system termination or read kernel memory
Affected products: vendor: Apple
product: macOS
Published: 2020-04-01T17:52:45.000Z
CVE-2020-3909 
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
Problem types: description: Multiple issues in libxml2
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:53:04.000Z
CVE-2020-3910 
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
Problem types: description: Multiple issues in libxml2
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:54:25.000Z
CVE-2020-3911 
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
Problem types: description: Multiple issues in libxml2
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-04-01T17:53:51.000Z