rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-9805 
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.
Problem types: description: Processing maliciously crafted web content may lead to universal cross site scripting
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-06-09T16:06:56.000Z
CVE-2020-9806 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-06-09T16:07:46.000Z
CVE-2020-9807 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-06-09T16:08:53.000Z
CVE-2020-9808 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to cause unexpected system termination or write kernel memory.
Problem types: description: An application may be able to cause unexpected system termination or write kernel memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:10:08.000Z
CVE-2020-9809 
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:08:11.000Z
CVE-2020-9810 
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.5. A person with physical access to a Mac may be able to bypass Login Window.
Problem types: description: A person with physical access to a Mac may be able to bypass Login Window
Affected products: vendor: Apple
product: macOS
Published: 2020-10-22T17:52:03.000Z
CVE-2020-9811 
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A local user may be able to read kernel memory.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:08:39.000Z
CVE-2020-9812 
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A local user may be able to read kernel memory.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:09:11.000Z
CVE-2020-9813 
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:10:48.000Z
CVE-2020-9814 
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:10:33.000Z
CVE-2020-9815 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted audio file may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted audio file may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:11:09.000Z
CVE-2020-9816 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
Problem types: description: Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:11:59.000Z
CVE-2020-9817 
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges.
Problem types: description: A malicious application may be able to gain root privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:11:30.000Z
CVE-2020-9818 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.
Problem types: description: Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: iOS-1
vendor: Apple
product: watchOS
Published: 2020-06-09T16:12:39.000Z
CVE-2020-9819 
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.
Problem types: description: Processing a maliciously crafted mail message may lead to heap corruption
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: iOS-1
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS-1
Published: 2020-06-09T16:12:28.000Z
CVE-2020-9820 
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to modify the file system.
Problem types: description: A remote attacker may be able to modify the file system
Affected products: vendor: Apple
product: iOS
Published: 2020-06-09T16:13:30.000Z
CVE-2020-9821 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:13:22.000Z
CVE-2020-9822 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:13:53.000Z
CVE-2020-9823 
This issue was addressed with improved checks. This issue is fixed in iOS 13.5 and iPadOS 13.5. Users removed from an iMessage conversation may still be able to alter state.
Problem types: description: Users removed from an iMessage conversation may still be able to alter state
Affected products: vendor: Apple
product: iOS
Published: 2020-06-09T16:13:00.000Z
CVE-2020-9824 
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.5. A non-privileged user may be able to modify restricted network settings.
Problem types: description: A non-privileged user may be able to modify restricted network settings
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:14:40.000Z
CVE-2020-9825 
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences.
Problem types: description: A malicious application may be able to bypass Privacy preferences
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2020-06-09T16:13:43.000Z
CVE-2020-9826 
A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker may be able to cause a denial of service.
Problem types: description: A remote attacker may be able to cause a denial of service
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2020-06-09T16:14:49.000Z
CVE-2020-9827 
A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A remote attacker may be able to cause a denial of service.
Problem types: description: A remote attacker may be able to cause a denial of service
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:14:07.000Z
CVE-2020-9828 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to leak sensitive user information.
Problem types: description: A remote attacker may be able to leak sensitive user information
Affected products: vendor: Apple
product: macOS
Published: 2020-10-22T17:53:58.000Z
CVE-2020-9829 
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted text message may lead to application denial of service.
Problem types: description: Processing a maliciously crafted text message may lead to application denial of service
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:15:24.000Z
CVE-2020-9830 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2020-06-09T16:14:31.000Z
CVE-2020-9831 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:15:09.000Z
CVE-2020-9832 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:14:59.000Z
CVE-2020-9833 
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.5. A local user may be able to read kernel memory.
Problem types: description: A local user may be able to read kernel memory
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:15:33.000Z
CVE-2020-9834 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:15:16.000Z
CVE-2020-9835 
An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 13.5 and iPadOS 13.5. A user’s video may not be paused in a FaceTime call if they exit the FaceTime app while the call is ringing.
Problem types: description: A user’s video may not be paused in a FaceTime call if they exit the FaceTime app while the call is ringing
Affected products: vendor: Apple
product: iOS
Published: 2020-06-09T16:16:03.000Z
CVE-2020-9837 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. A remote attacker may be able to leak memory.
Problem types: description: A remote attacker may be able to leak memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
Published: 2020-06-09T16:16:20.000Z
CVE-2020-9838 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to cause arbitrary code execution.
Problem types: description: A remote attacker may be able to cause arbitrary code execution
Affected products: vendor: Apple
product: iOS
Published: 2020-06-09T16:16:39.000Z
CVE-2020-9839 
A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:16:12.000Z
CVE-2020-9840 
In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions.
Problem types: description: Improper decompression limits may lead to a denial of service
Affected products: vendor: Swift
product: SwiftNIO Extras
Published: 2020-05-11T19:35:02.000Z
CVE-2020-9841 
An integer overflow was addressed through improved input validation. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:16:58.000Z
CVE-2020-9842 
An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application could interact with system processes to access private information and perform privileged actions.
Problem types: description: A malicious application could interact with system processes to access private information and perform privileged actions
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:16:30.000Z
CVE-2020-9843 
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack.
Problem types: description: Processing maliciously crafted web content may lead to a cross site scripting attack
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-06-09T16:18:20.000Z
CVE-2020-9844 
A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Problem types: description: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
Published: 2020-06-09T16:16:50.000Z
CVE-2020-9846 
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs.
Problem types: description: A malicious application may be able to access local users' Apple IDs
Affected products: vendor: Apple
product: macOS
Published: 2023-02-27T00:00:00.000Z
CVE-2020-9847 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to break out of its sandbox.
Problem types: description: A malicious application may be able to break out of its sandbox
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:17:07.000Z
CVE-2020-9848 
An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.
Problem types: description: A person with physical access to an iOS device may be able to view notification contents from the lockscreen
Affected products: vendor: Apple
product: iOS
Published: 2020-06-09T16:18:01.000Z
CVE-2020-9849 
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0. A remote attacker may be able to leak memory.
Problem types: description: A remote attacker may be able to leak memory
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-12-08T19:20:06.000Z
CVE-2020-9850 
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution.
Problem types: description: A remote attacker may be able to cause arbitrary code execution
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: Safari
vendor: Apple
product: iTunes for Windows
vendor: Apple
product: iCloud for Windows
vendor: Apple
product: iCloud for Windows (Legacy)
Published: 2020-06-09T16:18:37.000Z
CVE-2020-9851 
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to modify protected parts of the file system.
Problem types: description: A malicious application may be able to modify protected parts of the file system
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:17:45.000Z
CVE-2020-9852 
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2020-06-09T16:18:59.000Z
CVE-2020-9853 
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: macOS
Published: 2020-10-22T17:53:45.000Z
CVE-2020-9854 
A logic issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: iOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
Published: 2020-10-22T17:54:06.000Z
CVE-2020-9855 
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.5. A local attacker may be able to elevate their privileges.
Problem types: description: A local attacker may be able to elevate their privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:17:52.000Z
CVE-2020-9856 
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: macOS
Published: 2020-06-09T16:18:29.000Z