rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-26721 
A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.
Problem types: description: A malicious application may be able to gain root privileges
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T18:52:36.000Z
CVE-2022-26722 
A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to gain root privileges.
Problem types: description: A malicious application may be able to gain root privileges
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T18:53:35.000Z
CVE-2022-26723 
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.
Problem types: description: Mounting a maliciously crafted Samba network share may lead to arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T18:54:20.000Z
CVE-2022-26724 
An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may be able to enable iCloud Photos without authentication.
Problem types: description: A local user may be able to enable iCloud Photos without authentication
Affected products: vendor: Apple
product: tvOS
Published: 2022-05-26T18:55:06.000Z
CVE-2022-26725 
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is removed with Preview Inspector.
Problem types: description: Photo location information may persist after it is removed with Preview Inspector
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T18:56:04.000Z
CVE-2022-26726 
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen.
Problem types: description: An app may be able to capture a user's screen
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T18:56:49.000Z
CVE-2022-26727 
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system.
Problem types: description: A malicious application may be able to modify protected parts of the file system
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
Published: 2022-05-26T18:57:39.000Z
CVE-2022-26728 
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to access restricted files.
Problem types: description: A malicious application may be able to access restricted files
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T18:58:23.000Z
CVE-2022-26730 
A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-26731 
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious website may be able to track users in Safari private browsing mode.
Problem types: description: A malicious website may be able to track users in Safari private browsing mode
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T18:59:10.000Z
CVE-2022-26736 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
Published: 2022-05-26T19:00:08.000Z
CVE-2022-26737 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
Published: 2022-05-26T19:01:05.000Z
CVE-2022-26738 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
Published: 2022-05-26T19:01:56.000Z
CVE-2022-26739 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
Published: 2022-05-26T19:02:50.000Z
CVE-2022-26740 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
Published: 2022-05-26T19:03:32.000Z
CVE-2022-26741 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:04:22.000Z
CVE-2022-26742 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:05:05.000Z
CVE-2022-26743 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.4. An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges.
Problem types: description: An attacker that has already achieved code execution in macOS Recovery may be able to escalate to kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:05:51.000Z
CVE-2022-26744 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2022-05-26T00:00:00.000Z
CVE-2022-26745 
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malicious application may disclose restricted memory.
Problem types: description: A malicious application may disclose restricted memory
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:07:19.000Z
CVE-2022-26746 
This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.
Problem types: description: A malicious application may be able to bypass Privacy preferences
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:08:05.000Z
CVE-2022-26747 
This issue was addressed with improved checks. This issue is fixed in Xcode 13.4. An app may be able to gain elevated privileges.
Problem types: description: An app may be able to gain elevated privileges
Affected products: vendor: Apple
product: Xcode
Published: 2022-05-26T19:09:32.000Z
CVE-2022-26748 
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:10:15.000Z
CVE-2022-26749 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:11:11.000Z
CVE-2022-26750 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:12:04.000Z
CVE-2022-26751 
A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:12:51.000Z
CVE-2022-26752 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:14:03.000Z
CVE-2022-26753 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:14:57.000Z
CVE-2022-26754 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:15:43.000Z
CVE-2022-26755 
This issue was addressed with improved environment sanitization. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to break out of its sandbox.
Problem types: description: A malicious application may be able to break out of its sandbox
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:16:26.000Z
CVE-2022-26756 
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:17:16.000Z
CVE-2022-26757 
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T19:18:07.000Z
CVE-2022-26760 
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A malicious application may be able to elevate privileges.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2023-02-27T00:00:00.000Z
CVE-2022-26761 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
Published: 2022-05-26T19:18:52.000Z
CVE-2022-26762 
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with system privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-26763 
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be able to execute arbitrary code with system privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T19:19:37.000Z
CVE-2022-26764 
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
Problem types: description: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T19:20:23.000Z
CVE-2022-26765 
A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
Problem types: description: A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T19:21:18.000Z
CVE-2022-26766 
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation.
Problem types: description: A malicious app may be able to bypass signature validation
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T19:22:04.000Z
CVE-2022-26767 
The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.
Problem types: description: A malicious application may be able to bypass Privacy preferences
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:22:54.000Z
CVE-2022-26768 
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T19:23:54.000Z
CVE-2022-26769 
A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:24:37.000Z
CVE-2022-26770 
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:25:26.000Z
CVE-2022-26771 
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-05-26T19:26:34.000Z
CVE-2022-26772 
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-05-26T19:27:18.000Z
CVE-2022-26773 
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.
Problem types: description: An application may be able to delete files for which it does not have permission
Affected products: vendor: Apple
product: iTunes for Windows
Published: 2022-05-26T19:28:04.000Z
CVE-2022-26774 
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.
Problem types: description: A local attacker may be able to elevate their privileges
Affected products: vendor: Apple
product: iTunes for Windows
Published: 2022-05-26T19:28:46.000Z
CVE-2022-26775 
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.
Problem types: description: An attacker may be able to cause unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: Security Update - Catalina
vendor: Apple
product: macOS
Published: 2022-05-26T19:29:34.000Z
CVE-2022-26776 
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.
Problem types: description: An attacker may be able to cause unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-05-26T19:30:18.000Z
CVE-2022-26777 
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-16T15:18:23.000Z
CVE-2022-26778 
Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration. This could allow a Windows user (who has sufficient privileges) to access a network file system that they were not authorized to access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
version: 3.1
Published: 2022-03-09T06:53:18.000Z