rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-6177 
A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to Lenovo Vantage or Lenovo Diagnostics in April 2018.
Problem types: description: Privilege escalation
Affected products: vendor: Lenovo
product: Solution Center
Credits: lang: en
value: Lenovo would like to thank Takeshi Shiomitsu at Pen Test Partners for reporting this issue.
Published: 2019-08-21T19:55:05.766Z
CVE-2019-6178 
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents.
Problem types: description: Information disclosure
Affected products: vendor: Iomega and LenovoEMC
product: NAS products
Credits: lang: en
value: Lenovo would like to thank Rafael Pedrero for reporting this issue.
Published: 2019-08-19T15:14:47.694Z
CVE-2019-6179 
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.
Problem types: description: information disclosure
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
vendor: Lenovo
product: XClarity Integrator (LXCI) for Microsoft System Center
vendor: Lenovo
product: XClarity Integrator (LXCI) for VMware vCenter
Credits: lang: en
value: Lenovo thanks USD AG for reporting this issue.
Published: 2019-09-03T18:50:10.921Z
CVE-2019-6180 
A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Problem types: description: code execution
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
Published: 2019-09-03T18:50:11.005Z
CVE-2019-6181 
A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
Problem types: description: code execution
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
Published: 2019-09-03T18:50:11.062Z
CVE-2019-6182 
A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.
Problem types: description: code execution
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
Published: 2019-09-03T18:50:11.119Z
CVE-2019-6183 
A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected.
Problem types: description: denial of service
Affected products: vendor: Lenovo
product: Energy Management driver
Published: 2019-12-10T18:05:17.141Z
CVE-2019-6184 
A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation.
Problem types: description: local privilege escalation
Affected products: vendor: Lenovo
product: Customer Engagement Service (CCSDK)
Published: 2019-11-20T01:31:13.013Z
CVE-2019-6186 
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user.
Problem types: description: local privilege escalation
Affected products: vendor: Lenovo
product: Lenovo System Interface Foundation
Published: 2019-11-20T01:31:13.404Z
CVE-2019-6187 
A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.
Problem types: description: arbitrary eode execution
Affected products: vendor: Lenovo
product: Lenovo XClarity Controller (XCC)
Published: 2019-11-20T01:31:13.802Z
CVE-2019-6188 ThinkPad T460p and T470p BIOS Tamper Mechanism
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.
Problem types: description: Unauthorized access
Affected products: vendor: Lenovo
product: ThinkPad T470p
vendor: Lenovo
product: ThinkPad T460p
Published: 2019-11-12T20:40:54.000Z
CVE-2019-6189 
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL.
Problem types: description: local privilege escalation
Affected products: vendor: Lenovo
product: Lenovo System Interface Foundation
Published: 2019-11-20T01:31:14.196Z
CVE-2019-6190 
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.
Problem types: description: denial of service
Affected products: vendor: Lenovo
product: BIOS
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
version: 3.1
Published: 2020-02-14T17:10:26.285Z
CVE-2019-6191 
A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation.
Problem types: description: local privilege escalation
Affected products: vendor: Lenovo
product: LenovoPaper
Published: 2019-11-20T01:31:14.603Z
CVE-2019-6192 
A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.
Problem types: description: denial of service
Affected products: vendor: Lenovo
product: Power Management driver
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2019-12-10T18:05:17.706Z
CVE-2019-6193 
An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-02-14T17:10:26.717Z
CVE-2019-6194 
An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.
Problem types: cwe_id: CWE-611
description: CWE-611 Improper Restriction of XML External Entity Reference ('XXE')
Affected products: vendor: Lenovo
product: XClarity Administrator (LXCA)
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-02-14T17:10:27.142Z
CVE-2019-6195 
An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1) “LDAP Authentication Only with Local Authorization” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privileged user logging out. The authorization bypass does not exist when “Local Authentication and Authorization” or “LDAP Authentication and Authorization” modes are configured and used by XCC.
Problem types: cwe_id: CWE-264
description: CWE-264 Permissions, Privileges, and Access Controls
Affected products: vendor: Lenovo
product: XClarity Controller (XCC)
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Published: 2020-02-14T17:10:27.559Z
CVE-2019-6196 
A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.
Problem types: cwe_id: CWE-426
description: CWE-426 Untrusted Search Path
Affected products: vendor: Lenovo
product: Installation Packages
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lenovo thanks Eran Shimony at CyberArk Labs for reporting this issue
Published: 2020-06-09T19:50:34.538Z
CVE-2019-6197 
A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Lenovo
product: PC Manager
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lenovo thanks Hou Jing Yi for reporting this issue.
Published: 2024-07-31T20:30:25.843Z
CVE-2019-6198 
A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Lenovo
product: PC Manager
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lenovo thanks Huang Can and Han Xinhui of Wang Xuan Institute of Computer Science, Peking University for reporting this issue.
Published: 2024-07-31T20:30:16.910Z
CVE-2019-6200 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.
Problem types: description: An attacker in a privileged network position may be able to execute arbitrary code
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6201 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2019-12-18T17:33:15.000Z
CVE-2019-6202 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: watchOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6203 
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic.
Problem types: description: An attacker in a privileged network position may be able to intercept network traffic
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
Published: 2020-04-17T17:47:06.000Z
CVE-2019-6204 
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.
Problem types: description: Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: Safari
Published: 2019-12-18T17:33:15.000Z
CVE-2019-6205 
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.
Problem types: description: A malicious application may cause unexpected changes in memory shared between processes
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6206 
An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared.
Problem types: description: Password autofill may fill in passwords after they were manually cleared
Affected products: vendor: Apple
product: iOS
Published: 2019-03-04T20:00:00.000Z
CVE-2019-6207 
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2019-12-18T17:33:15.000Z
CVE-2019-6208 
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.
Problem types: description: A malicious application may cause unexpected changes in memory shared between processes
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6209 
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6210 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6211 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6212 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6213 
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6214 
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.
Problem types: description: A malicious application may be able to break out of its sandbox
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6215 
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6216 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6217 
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6218 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6219 
A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service.
Problem types: description: Processing a maliciously crafted message may lead to a denial of service
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: watchOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6220 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.
Problem types: description: An application may be able to read restricted memory
Affected products: vendor: Apple
product: macOS
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6221 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: iTunes for Windows
Published: 2019-03-05T16:00:00.000Z
CVE-2019-6222 
A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able to access the microphone without the microphone use indicator being shown.
Problem types: description: A website may be able to access the microphone without the microphone use indicator being shown
Affected products: vendor: Apple
product: iOS
Published: 2019-12-18T17:33:15.000Z