rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-8719 
A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.
Problem types: description: Processing maliciously crafted web content may lead to universal cross site scripting
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8720 
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: webkitgtk
Published: 2023-03-06T00:00:00.000Z
CVE-2019-8721 
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
Problem types: description: Compiling code without proper input validation could lead to arbitrary code execution with user privilege
Affected products: vendor: Apple
product: Xcode
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8722 
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
Problem types: description: Compiling code without proper input validation could lead to arbitrary code execution with user privilege
Affected products: vendor: Apple
product: Xcode
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8723 
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
Problem types: description: Compiling code without proper input validation could lead to arbitrary code execution with user privilege
Affected products: vendor: Apple
product: Xcode
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8724 
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
Problem types: description: Compiling code without proper input validation could lead to arbitrary code execution with user privilege
Affected products: vendor: Apple
product: Xcode
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8725 
The issue was addressed with improved handling of service worker lifetime. This issue is fixed in Safari 13.0.1. Service workers may leak private browsing history.
Problem types: description: Service workers may leak private browsing history
Affected products: vendor: Apple
product: Safari
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8726 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8727 
A logic issue was addressed with improved state management. This issue is fixed in iOS 13. Visiting a malicious website may lead to address bar spoofing.
Problem types: description: Visiting a malicious website may lead to address bar spoofing
Affected products: vendor: Apple
product: iOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8728 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows
Published: 2020-10-27T19:45:02.000Z
CVE-2019-8730 
The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 10.15. A local user may be able to view a user’s locked notes.
Problem types: description: A local user may be able to view a user’s locked notes
Affected products: vendor: Apple
product: macOS
Published: 2019-12-18T17:33:21.000Z
CVE-2019-8731 
A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue is fixed in iOS 13. Processing a maliciously crafted file may disclose user information.
Problem types: description: Processing a maliciously crafted file may disclose user information
Affected products: vendor: Apple
product: iOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8732 
The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.
Problem types: description: Deleted calls remained visible on the device
Affected products: vendor: Apple
product: iOS
Published: 2020-10-27T19:44:48.000Z
CVE-2019-8733 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8734 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows
Published: 2020-10-27T19:43:13.000Z
CVE-2019-8735 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8736 
An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged network position may be able to leak sensitive user information.
Problem types: description: An attacker in a privileged network position may be able to leak sensitive user information
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:45:47.000Z
CVE-2019-8737 
A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged position may be able to perform a denial of service attack.
Problem types: description: An attacker in a privileged position may be able to perform a denial of service attack
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:43:46.000Z
CVE-2019-8738 
A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted file may lead to arbitrary code execution
Affected products: vendor: Apple
product: Xcode
Published: 2019-12-18T17:33:21.000Z
CVE-2019-8739 
A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted file may lead to arbitrary code execution
Affected products: vendor: Apple
product: Xcode
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8740 
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-10-27T19:44:12.000Z
CVE-2019-8741 
A denial of service issue was addressed with improved input validation.
Problem types: description: Processing a large input may lead to a denial of service
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: tvOS
vendor: Apple
product: macOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-02-28T13:01:37.000Z
CVE-2019-8742 
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen.
Problem types: description: A person with physical access to an iOS device may be able to access contacts from the lock screen
Affected products: vendor: Apple
product: iOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8743 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: watchOS
Published: 2019-12-18T17:33:21.000Z
CVE-2019-8744 
A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iOS 13. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:46:04.000Z
CVE-2019-8745 
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted text file may lead to arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8746 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Problem types: description: A remote attacker may be able to cause unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:44:32.000Z
CVE-2019-8747 
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: watchOS
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8748 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8749 
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. Multiple issues in libxml2.
Problem types: description: Multiple issues in libxml2
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:46:44.000Z
CVE-2019-8750 
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Multiple issues in libxslt.
Problem types: description: Multiple issues in libxslt
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iCloud for Windows
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8751 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, iCloud for Windows 7.14, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows
Published: 2020-10-27T19:46:54.000Z
CVE-2019-8752 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, iCloud for Windows 7.14, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: watchOS
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows
Published: 2020-10-27T19:45:29.000Z
CVE-2019-8753 
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. Processing maliciously crafted web content may lead to a cross site scripting attack.
Problem types: description: Processing maliciously crafted web content may lead to a cross site scripting attack
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:45:15.000Z
CVE-2019-8754 
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A malicious HTML document may be able to render iframes with sensitive user information.
Problem types: description: A malicious HTML document may be able to render iframes with sensitive user information
Affected products: vendor: Apple
product: macOS
Published: 2020-10-27T19:47:07.000Z
CVE-2019-8755 
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: macOS
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8756 
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. Multiple issues in libxml2.
Problem types: description: Multiple issues in libxml2
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:48:26.000Z
CVE-2019-8757 
A race condition existed when reading and writing user preferences. This was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15. The "Share Mac Analytics" setting may not be disabled when a user deselects the switch to share analytics.
Problem types: description: The "Share Mac Analytics" setting may not be disabled when a user deselects the switch to share analytics
Affected products: vendor: Apple
product: macOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8758 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.
Problem types: description: An application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8759 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A local user may be able to cause unexpected system termination or read kernel memory.
Problem types: description: A local user may be able to cause unexpected system termination or read kernel memory
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:46:17.000Z
CVE-2019-8760 
This issue was addressed by improving Face ID machine learning models. This issue is fixed in iOS 13. A 3D model constructed to look like the enrolled user may authenticate via Face ID.
Problem types: description: A 3D model constructed to look like the enrolled user may authenticate via Face ID
Affected products: vendor: Apple
product: iOS
Published: 2019-12-18T17:33:23.000Z
CVE-2019-8761 
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Parsing a maliciously crafted text file may lead to disclosure of user information.
Problem types: description: Parsing a maliciously crafted text file may lead to disclosure of user information
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-10-27T19:49:03.000Z
CVE-2019-8762 
A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross site scripting.
Problem types: description: Processing maliciously crafted web content may lead to universal cross site scripting
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows
Published: 2020-10-27T19:46:34.000Z
CVE-2019-8763 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13, Safari 13.0.1, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2019-12-18T17:33:24.000Z
CVE-2019-8764 
A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.
Problem types: description: Processing maliciously crafted web content may lead to universal cross site scripting
Affected products: vendor: Apple
product: watchOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8765 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: watchOS
Published: 2019-12-18T17:33:22.000Z
CVE-2019-8766 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iCloud for Windows
Published: 2019-12-18T17:33:23.000Z