rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-0988 
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0992, CVE-2020-0994, CVE-2020-0995, CVE-2020-0999, CVE-2020-1008.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-04-15T15:13:16.000Z
CVE-2020-0989 Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Version 1803
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:33.000Z
CVE-2020-0991 
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0760.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office 365 ProPlus
Published: 2020-04-15T15:13:16.000Z
CVE-2020-0992 
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0994, CVE-2020-0995, CVE-2020-0999, CVE-2020-1008.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-04-15T15:13:17.000Z
CVE-2020-0993 
A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnerability'.
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-04-15T15:13:17.000Z
CVE-2020-0994 
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0995, CVE-2020-0999, CVE-2020-1008.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-04-15T15:13:18.000Z
CVE-2020-0995 
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0999, CVE-2020-1008.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-04-15T15:13:18.000Z
CVE-2020-0996 
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0985.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-04-15T15:13:19.000Z
CVE-2020-0997 Windows Camera Codec Pack Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows 10 Version 1607
cpes: cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows 10 Version 1803
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1709
cpes: cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1507
cpes: cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
cpes: cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2020-09-11T17:08:34.000Z
CVE-2020-0999 
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-0992, CVE-2020-0994, CVE-2020-0995, CVE-2020-1008.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1909 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1909 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1909 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2020-04-15T15:13:19.000Z
CVE-2020-10001 
An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to read restricted memory.
Problem types: description: A malicious application may be able to read restricted memory
Affected products: vendor: Apple
product: macOS
Published: 2021-04-02T17:24:50.000Z
CVE-2020-10002 
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A local user may be able to read arbitrary files.
Problem types: description: A local user may be able to read arbitrary files
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-12-08T19:57:51.000Z
CVE-2020-10003 
An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges.
Problem types: description: A local attacker may be able to elevate  their privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: macOS
Published: 2020-12-08T20:02:29.000Z
CVE-2020-10004 
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
Problem types: description: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2020-12-08T20:02:05.000Z
CVE-2020-10005 
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. An attacker in a privileged network position may be able to perform denial of service.
Problem types: description: An attacker in a privileged network position may be able to perform denial of service
Affected products: vendor: Apple
product: macOS
Published: 2021-10-28T00:00:00.000Z
CVE-2020-10006 
This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files.
Problem types: description: A malicious application may be able to access restricted files
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T19:59:22.000Z
CVE-2020-10007 
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:03:08.000Z
CVE-2020-10008 
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.0.1. A malicious application with root privileges may be able to access private information.
Problem types: description: A malicious application with root privileges may be able to access private information
Affected products: vendor: Apple
product: macOS
Published: 2021-04-02T17:23:36.000Z
CVE-2020-10009 
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions.
Problem types: description: A sandboxed process may be able to circumvent sandbox restrictions
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:00:11.000Z
CVE-2020-10010 
A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges.
Problem types: description: A local attacker may be able to elevate their privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: macOS
Published: 2020-12-08T20:01:31.000Z
CVE-2020-10011 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Problem types: description: Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2020-12-08T20:02:48.000Z
CVE-2020-10012 
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted document may lead to a cross site scripting attack.
Problem types: description: Processing a maliciously crafted document may lead to a cross site scripting attack
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:03:25.000Z
CVE-2020-10013 
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: iOS and iPadOS
Published: 2020-12-08T20:01:47.000Z
CVE-2020-10014 
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to break out of its sandbox.
Problem types: description: A malicious application may be able to break out of its sandbox
Affected products: vendor: Apple
product: macOS
Published: 2020-12-08T20:03:56.000Z
CVE-2020-10015 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-04-02T17:26:53.000Z
CVE-2020-10016 
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: macOS
Published: 2020-12-08T20:03:44.000Z
CVE-2020-10017 
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted audio file may lead to arbitrary code execution
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: macOS
Published: 2020-12-08T20:06:47.000Z
CVE-2020-10018 
WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-02T22:11:56.000Z
CVE-2020-10019 Buffer Overflow in USB DFU requested length
USB DFU has a potential buffer overflow where the requested length (wLength) is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: zephyrproject-rtos
product: zephyr
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: NCC Group for report
Published: 2020-05-11T22:26:11.452Z
CVE-2020-10021 Out-of-bounds write in USB Mass Storage with unaligned sizes
Out-of-bounds Write in the USB Mass Storage memoryWrite handler with unaligned Sizes See NCC-ZEP-024, NCC-ZEP-025, NCC-ZEP-026 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: zephyrproject-rtos
product: zephyr
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: NCC Group for report
Published: 2020-05-11T22:26:11.985Z
CVE-2020-10022 UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array
A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Overflow
Affected products: vendor: zephyrproject-rtos
product: zephyr
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: NCC Group for report
Published: 2020-05-11T22:26:12.494Z