rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-44157 
A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.
Problem types: description: Parsing a maliciously crafted video file may lead to unexpected system termination
Affected products: vendor: Apple
product: Apple TV
vendor: Apple
product: iTunes for Windows
Published: 2024-10-11T17:26:55.533Z
CVE-2024-44158 
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. A shortcut may output sensitive user data without consent.
Problem types: description: A shortcut may output sensitive user data without consent
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2024-09-16T23:22:59.176Z
CVE-2024-44159 
A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to bypass Privacy preferences.
Problem types: description: An app may be able to bypass Privacy preferences
Affected products: vendor: Apple
product: macOS
Published: 2024-10-28T21:08:23.529Z
CVE-2024-44160 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination.
Problem types: description: Processing a maliciously crafted texture may lead to unexpected app termination
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:37.835Z
CVE-2024-44161 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination.
Problem types: description: Processing a maliciously crafted texture may lead to unexpected app termination
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:40.785Z
CVE-2024-44162 
This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gain access to a user's Keychain items.
Problem types: description: A malicious application may gain access to a user's Keychain items
Affected products: vendor: Apple
product: Xcode
Published: 2024-09-16T23:23:01.988Z
CVE-2024-44163 
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. A malicious application may be able to access private information.
Problem types: description: A malicious application may be able to access private information
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:23:06.694Z
CVE-2024-44164 
This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to bypass Privacy preferences.
Problem types: description: An app may be able to bypass Privacy preferences
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2024-09-16T23:23:10.979Z
CVE-2024-44165 
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Network traffic may leak outside a VPN tunnel.
Problem types: description: Network traffic may leak outside a VPN tunnel
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: visionOS
Published: 2024-09-16T23:23:27.570Z
CVE-2024-44166 
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data.
Problem types: description: An app may be able to access user-sensitive data
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:13.668Z
CVE-2024-44167 
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. An app may be able to overwrite arbitrary files.
Problem types: description: An app may be able to overwrite arbitrary files
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: visionOS
Published: 2024-09-16T23:22:25.822Z
CVE-2024-44168 
A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system.
Problem types: description: An app may be able to modify protected parts of the file system
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:23:15.311Z
CVE-2024-44169 
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause unexpected system termination.
Problem types: description: An app may be able to cause unexpected system termination
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:23:20.604Z
CVE-2024-44170 
A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. An app may be able to access user-sensitive data.
Problem types: description: An app may be able to access user-sensitive data
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:22:06.931Z
CVE-2024-44171 
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, watchOS 11. An attacker with physical access to a locked device may be able to Control Nearby Devices via accessibility features.
Problem types: description: An attacker with physical access to a locked device may be able to Control Nearby Devices via accessibility features
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:22:29.268Z
CVE-2024-44172 
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access contacts.
Problem types: description: An app may be able to access contacts
Affected products: vendor: Apple
product: macOS
Published: 2025-01-27T21:46:28.084Z
CVE-2024-44174 
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An attacker may be able to view restricted content from the lock screen.
Problem types: description: An attacker may be able to view restricted content from the lock screen
Affected products: vendor: Apple
product: macOS
Published: 2024-10-28T21:08:19.458Z
CVE-2024-44175 
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data.
Problem types: description: An app may be able to access sensitive user data
Affected products: vendor: Apple
product: macOS
Published: 2024-10-28T21:08:20.253Z
CVE-2024-44176 
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. Processing an image may lead to a denial-of-service.
Problem types: description: Processing an image may lead to a denial-of-service
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:22:34.847Z
CVE-2024-44177 
A privacy issue was addressed by removing sensitive data. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data.
Problem types: description: An app may be able to access user-sensitive data
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:43.861Z
CVE-2024-44178 
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system.
Problem types: description: An app may be able to modify protected parts of the file system
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:56.274Z
CVE-2024-44179 
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen.
Problem types: description: An attacker with physical access to a device may be able to read contact numbers from the lock screen
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2025-03-10T19:11:13.233Z
CVE-2024-44180 
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen.
Problem types: description: An attacker with physical access may be able to access contacts from the lock screen
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2024-09-16T23:23:08.368Z
CVE-2024-44181 
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read sensitive location information.
Problem types: description: An app may be able to read sensitive location information
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:53.686Z
CVE-2024-44182 
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive data logged when a shortcut fails to launch another app.
Problem types: description: An app may be able to access sensitive data logged when a shortcut fails to launch another app
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:51.058Z
CVE-2024-44183 
A logic error was addressed with improved error handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to cause a denial-of-service.
Problem types: description: An app may be able to cause a denial-of-service
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:22:31.160Z
CVE-2024-44184 
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data.
Problem types: description: An app may be able to access user-sensitive data
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2024-09-16T23:22:22.803Z
CVE-2024-44185 
The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.
Problem types: description: Processing maliciously crafted web content may lead to an unexpected process crash
Affected products: vendor: Apple
product: Safari
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-10-24T16:40:36.055Z
CVE-2024-44186 
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.
Problem types: description: An app may be able to access protected user data
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:23:21.473Z
CVE-2024-44187 
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin.
Problem types: description: A malicious website may exfiltrate data cross-origin
Affected products: vendor: Apple
product: Safari
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:23:16.230Z
CVE-2024-44188 
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.
Problem types: description: An app may be able to access protected user data
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:24.814Z
CVE-2024-44189 
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a process may be able to capture screen contents without user consent.
Problem types: description: A logic issue existed where a process may be able to capture screen contents without user consent
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:22:11.673Z
CVE-2024-44190 
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files.
Problem types: description: An app may be able to read arbitrary files
Affected products: vendor: Apple
product: macOS
Published: 2024-09-16T23:23:18.930Z
CVE-2024-44191 
This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. An app may gain unauthorized access to Bluetooth.
Problem types: description: An app may gain unauthorized access to Bluetooth
Affected products: vendor: Apple
product: Xcode
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:23:17.982Z
CVE-2024-44192 
The issue was addressed with improved checks. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to an unexpected process crash.
Problem types: description: Processing maliciously crafted web content may lead to an unexpected process crash
Affected products: vendor: Apple
product: Safari
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2025-03-10T19:11:09.176Z
CVE-2024-44193 
A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local attacker may be able to elevate their privileges.
Problem types: description: A local attacker may be able to elevate their privileges
Affected products: vendor: Apple
product: iTunes for Windows
Published: 2024-10-02T14:24:36.119Z
CVE-2024-44194 
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1, watchOS 11.1. An app may be able to access sensitive user data.
Problem types: description: An app may be able to access sensitive user data
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-10-28T21:08:12.133Z
CVE-2024-44195 
A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to read arbitrary files.
Problem types: description: An app may be able to read arbitrary files
Affected products: vendor: Apple
product: macOS
Published: 2024-12-20T04:06:14.973Z
CVE-2024-44196 
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to modify protected parts of the file system.
Problem types: description: An app may be able to modify protected parts of the file system
Affected products: vendor: Apple
product: macOS
Published: 2024-10-28T21:08:24.337Z
CVE-2024-44197 
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
Problem types: description: An app may be able to cause unexpected system termination or corrupt kernel memory
Affected products: vendor: Apple
product: macOS
Published: 2024-10-28T21:08:17.028Z
CVE-2024-44198 
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to an unexpected process crash.
Problem types: description: Processing maliciously crafted web content may lead to an unexpected process crash
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-09-16T23:22:42.495Z
CVE-2024-44199 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause unexpected system termination or read kernel memory.
Problem types: description: An app may be able to cause unexpected system termination or read kernel memory
Affected products: vendor: Apple
product: macOS
Published: 2025-03-20T23:53:44.753Z
CVE-2024-44200 
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An app may be able to read sensitive location information.
Problem types: description: An app may be able to read sensitive location information
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2024-12-11T22:59:02.475Z
CVE-2024-44201 
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Processing a malicious crafted file may lead to a denial-of-service.
Problem types: description: Processing a malicious crafted file may lead to a denial-of-service
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: iPadOS
vendor: Apple
product: macOS
Published: 2024-12-11T22:59:08.652Z
CVE-2024-44202 
An authentication issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.
Problem types: description: Private Browsing tabs may be accessed without authentication
Affected products: vendor: Apple
product: Safari
vendor: Apple
product: iOS and iPadOS
Published: 2024-09-16T23:22:14.555Z
CVE-2024-44203 
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library.
Problem types: description: An app may be able to access a user's Photos Library
Affected products: vendor: Apple
product: macOS
Published: 2024-10-28T21:07:52.932Z
CVE-2024-44204 
A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's saved passwords may be read aloud by VoiceOver.
Problem types: description: A user's saved passwords may be read aloud by VoiceOver
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2024-10-03T23:29:52.868Z
CVE-2024-44205 
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A sandboxed app may be able to access sensitive user data in system logs.
Problem types: description: A sandboxed app may be able to access sensitive user data in system logs
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2024-10-24T16:40:45.432Z
CVE-2024-44206 
An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.
Problem types: description: A user may be able to bypass some web content restrictions
Affected products: vendor: Apple
product: Safari
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-10-24T16:40:46.107Z
CVE-2024-44207 
This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated.
Problem types: description: Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2024-10-03T23:29:53.561Z
CVE-2024-44208 
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences.
Problem types: description: An app may be able to bypass certain Privacy preferences
Affected products: vendor: Apple
product: macOS
Published: 2024-10-28T21:08:03.141Z
CVE-2024-44210 
This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.
Problem types: description: An app may be able to access user-sensitive data
Affected products: vendor: Apple
product: macOS
Published: 2026-01-16T17:06:08.146Z
CVE-2024-44211 
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.
Problem types: description: An app may be able to access user-sensitive data
Affected products: vendor: Apple
product: macOS
Published: 2024-12-20T04:06:18.132Z
CVE-2024-44212 
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Cookies belonging to one origin may be sent to another origin.
Problem types: description: Cookies belonging to one origin may be sent to another origin
Affected products: vendor: Apple
product: Safari
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: visionOS
vendor: Apple
product: watchOS
Published: 2024-12-11T22:57:27.473Z