| { | |
| "created_utc": "2026-11-09T13:40:21.918181+00:00", | |
| "definitions": { | |
| "ios_versions": "Release containing the fix, as named by Apple; not an affected-version range.", | |
| "topics": "Non-exclusive keyword matches in prompt plus answer, not expert topic labels or measured model competence.", | |
| "unique_cves": "Distinct CVE identifiers mentioned in retained records; not a fraction of all publicly known CVEs." | |
| }, | |
| "train": { | |
| "records": 3396, | |
| "by_source": { | |
| "apple_advisory": 1125, | |
| "cisa_kev": 454, | |
| "pentesting_explanation": 1817 | |
| }, | |
| "unique_cves": 1190, | |
| "cve_years": { | |
| "2026": 844, | |
| "2025": 185, | |
| "2020": 10, | |
| "2009": 4, | |
| "2008": 3, | |
| "2023": 29, | |
| "2014": 2, | |
| "2016": 2, | |
| "2021": 16, | |
| "2013": 2, | |
| "2017": 4, | |
| "2024": 46, | |
| "2022": 12, | |
| "2018": 6, | |
| "2011": 1, | |
| "2012": 1, | |
| "2019": 13, | |
| "2015": 5, | |
| "2010": 3, | |
| "2007": 2 | |
| }, | |
| "ios_versions": { | |
| "26.6": 97, | |
| "26.7.2": 134, | |
| "18.7.9": 49, | |
| "18.7.5": 29, | |
| "26.7": 95, | |
| "26.4": 44, | |
| "27": 163, | |
| "18.7.10": 131, | |
| "26.6.1": 35, | |
| "27.2": 163, | |
| "26.5.2": 38, | |
| "26.5": 67, | |
| "18.7.7": 26, | |
| "26.3": 43, | |
| "15.8.7": 4, | |
| "16.7.15": 1, | |
| "18.7.11": 3, | |
| "18.7.3": 2, | |
| "26.7.1": 1 | |
| }, | |
| "ios27_examples": 326, | |
| "apple_components": { | |
| "WebKit": 201, | |
| "Kernel": 150, | |
| "ImageIO": 62, | |
| "Model I/O": 35, | |
| "SceneKit": 30, | |
| "CoreMedia": 22, | |
| "AVEVideoEncoder": 21, | |
| "CoreAudio": 18, | |
| "Wi-Fi": 16, | |
| "Security": 15, | |
| "WebRTC": 15, | |
| "Audio": 11, | |
| "mDNSResponder": 11, | |
| "Accounts": 10, | |
| "FontParser": 10, | |
| "Bluetooth": 10, | |
| "Siri": 10, | |
| "Spotlight": 9, | |
| "Shortcuts": 9, | |
| "Apple Neural Engine": 8, | |
| "Contacts": 8, | |
| "AppleAVD": 8, | |
| "Accessibility": 8, | |
| "Photos Storage": 8, | |
| "App Store": 7, | |
| "CoreGraphics": 7, | |
| "CoreUI": 7, | |
| "Messages": 7, | |
| "Mail": 7, | |
| "IOKit": 6, | |
| "RealityKit": 6, | |
| "libarchive": 6, | |
| "Heimdal": 6, | |
| "Baseband": 6, | |
| "curl": 6, | |
| "WebKit Canvas": 6, | |
| "Sandbox Profiles": 6, | |
| "Telephony": 6, | |
| "Storage": 6, | |
| "MediaRemote": 6, | |
| "IOHIDFamily": 6, | |
| "Accelerate Framework": 5, | |
| "Game Center": 5, | |
| "LaunchServices": 5, | |
| "APFS": 5, | |
| "Calendar": 5, | |
| "Foundation": 5, | |
| "CoreServices": 5, | |
| "CoreText": 5, | |
| "UIKit": 5, | |
| "BackgroundAssets": 4, | |
| "AppleDouble": 4, | |
| "copyfile": 4, | |
| "iCloud": 4, | |
| "CloudKit": 4, | |
| "FileProvider": 4, | |
| "MobileBackup": 4, | |
| "Power Management": 4, | |
| "SpringBoard": 4, | |
| "App Intents": 4, | |
| "Apple Intelligence": 4, | |
| "WebKit Process Model": 4, | |
| "MobileAccessoryUpdater": 4, | |
| "Screenshots": 3, | |
| "TCC": 3, | |
| "Quick Look": 3, | |
| "AuthKit": 3, | |
| "Core Bluetooth": 3, | |
| "IOMobileFrameBuffer": 3, | |
| "IOGPUFamily": 3, | |
| "libxpc": 3, | |
| "HFS": 3, | |
| "Watch App": 3, | |
| "AppleKeyStore": 3, | |
| "NetworkExtension": 3, | |
| "Managed Configuration": 3, | |
| "WebKit Storage": 3, | |
| "Maps": 3, | |
| "Authentication Services": 3, | |
| "Sandbox": 3, | |
| "IOSurfaceAccelerator": 3, | |
| "libexpat": 2, | |
| "Vision": 2, | |
| "Time Zone": 2, | |
| "Focus": 2, | |
| "Safari": 2, | |
| "LinkPresentation": 2, | |
| "Apple Account": 2, | |
| "GeoServices": 2, | |
| "Compression": 2, | |
| "Music": 2, | |
| "TextKit": 2, | |
| "WebKit JavaScript Bindings": 2, | |
| "Crash Reporter": 2, | |
| "Live Captions": 2, | |
| "libxslt": 2, | |
| "IOSurface": 2, | |
| "FrontBoard": 2, | |
| "802.1X": 2, | |
| "WorkoutKit": 2, | |
| "USB": 2, | |
| "SwiftUI": 2, | |
| "CoreMotion": 2, | |
| "CoreUtils": 2, | |
| "zlib": 2, | |
| "Safe Browsing": 2, | |
| "Privacy": 2, | |
| "CFNetwork": 2, | |
| "exFAT": 2, | |
| "AppleJPEG": 2, | |
| "IOSkywalkFamily": 2, | |
| "UIFoundation": 2, | |
| "Pro Res": 2, | |
| "Symptom Framework": 2, | |
| "Disk Images": 2, | |
| "MobileGestalt": 2, | |
| "IOStorageFamily": 2, | |
| "CoreML": 2, | |
| "MediaAnalysis": 2, | |
| "StoreKit": 2, | |
| "file_cmds": 2, | |
| "XPC": 2, | |
| "CoreMedia Video Toolbox": 2, | |
| "Books": 2, | |
| "WebKit History": 2, | |
| "Status Bar": 2, | |
| "Clipboard": 2, | |
| "Networking": 2, | |
| "Multi-Touch": 2, | |
| "Screen Time": 2, | |
| "Photos": 2, | |
| "AirDrop": 2, | |
| "Graphics": 2, | |
| "HomeKit": 2, | |
| "DeviceCheck": 2, | |
| "Libnotify": 2, | |
| "DeviceLink": 2, | |
| "AccessorySetupKit": 2, | |
| "VoiceOver": 2, | |
| "libc": 2, | |
| "Siri Suggestions": 2, | |
| "Calling Framework": 2, | |
| "Reminders": 2, | |
| "Accounts Framework": 1, | |
| "NSColorPanel": 1, | |
| "CoreVideo": 1, | |
| "Single Sign-On": 1, | |
| "MigrationKit": 1, | |
| "Image Capture": 1, | |
| "Wi-Fi Connectivity": 1, | |
| "ppp": 1, | |
| "Sync Services": 1, | |
| "RawCamera": 1, | |
| "Wallet": 1, | |
| "Files": 1, | |
| "DriverKit": 1, | |
| "IOAcceleratorFamily": 1, | |
| "Software Update": 1, | |
| "CloudAttestation": 1, | |
| "Call History": 1, | |
| "ReplayKit": 1, | |
| "File Bookmark": 1, | |
| "Thread": 1, | |
| "Mail Drafts": 1, | |
| "Filters": 1, | |
| "Web Extensions": 1, | |
| "Safety Check": 1, | |
| "App Protection": 1, | |
| "System Preferences": 1, | |
| "WidgetKit": 1, | |
| "Voice Control": 1, | |
| "WebKit Sandboxing": 1, | |
| "libnetcore": 1, | |
| "iWork": 1, | |
| "CoreAnimation": 1, | |
| "Camera": 1, | |
| "Settings": 1, | |
| "Accelerate": 1, | |
| "Printing": 1, | |
| "CoreSymbolication": 1, | |
| "ColorSync": 1 | |
| }, | |
| "cisa_vendors": { | |
| "Microsoft": 67, | |
| "Cisco": 27, | |
| "Fortinet": 16, | |
| "Linux": 15, | |
| "Google": 14, | |
| "Ivanti": 13, | |
| "Citrix": 11, | |
| "Adobe": 10, | |
| "Synacor": 9, | |
| "SonicWall": 9, | |
| "Oracle": 7, | |
| "D-Link": 6, | |
| "Apache": 6, | |
| "Broadcom": 5, | |
| "Palo Alto Networks": 5, | |
| "Langflow": 5, | |
| "Check Point": 4, | |
| "Qualcomm": 4, | |
| "SolarWinds": 4, | |
| "Sangoma": 4, | |
| "Gladinet": 4, | |
| "Android": 4, | |
| "Samsung": 4, | |
| "Arista": 4, | |
| "PaperCut": 4, | |
| "GitLab": 4, | |
| "SimpleHelp ": 4, | |
| "Sitecore": 3, | |
| "ConnectWise": 3, | |
| "SmarterTools": 3, | |
| "Kentico": 3, | |
| "Roundcube": 3, | |
| "Ubiquiti": 3, | |
| "MikroTik": 3, | |
| "VMware": 3, | |
| "N-able": 3, | |
| "BerriAI": 3, | |
| "JFrog": 3, | |
| "TP-Link": 3, | |
| "Dassault Syst\u00e8mes": 3, | |
| "WordPress": 3, | |
| "Plex": 3, | |
| "Craft CMS": 2, | |
| "RARLAB": 2, | |
| "F5": 2, | |
| "Hitachi Vantara": 2, | |
| "GNU": 2, | |
| "Progress": 2, | |
| "TrueConf": 2, | |
| "JetBrains": 2, | |
| "CrushFTP": 2, | |
| "Advantive": 2, | |
| "TeleMessage": 2, | |
| "Ahsay": 2, | |
| "GeoVision": 2, | |
| "SysAid": 2, | |
| "WatchGuard": 2, | |
| "Juniper": 2, | |
| "PHP Group": 2, | |
| "LiteSpeed": 2, | |
| "Red Hat": 2, | |
| "OpenPLC": 2, | |
| "Paessler": 2, | |
| "Wing FTP Server": 2, | |
| "Commvault": 2, | |
| "BeyondTrust": 2, | |
| "ownCloud": 1, | |
| "Versa": 1, | |
| "SAP": 1, | |
| "OSGeo": 1, | |
| "WSO2": 1, | |
| "Edimax": 1, | |
| "Hewlett Packard Enterprise (HPE)": 1, | |
| "Qualitia": 1, | |
| "ProFTPD": 1, | |
| "KNX Association": 1, | |
| "Soliton Systems K.K": 1, | |
| "SKYSEA": 1, | |
| "Hikvision": 1, | |
| "Strapi": 1, | |
| "MDaemon": 1, | |
| "Lantronix": 1, | |
| "Nx": 1, | |
| "7-Zip": 1, | |
| "Adminer": 1, | |
| "Sudo": 1, | |
| "Balbooa": 1, | |
| "DrayTek": 1, | |
| "DD-WRT": 1, | |
| "CWP": 1, | |
| "TeamT5": 1, | |
| "Meta Platforms": 1, | |
| "ISC": 1, | |
| "AMI": 1, | |
| "Trimble": 1, | |
| "Wazuh": 1, | |
| "Jenkins": 1, | |
| "Prettier": 1, | |
| "Collabora": 1, | |
| "Motex": 1, | |
| "Srimax": 1, | |
| "Dell": 1, | |
| "tj-actions": 1, | |
| "Audinate": 1, | |
| "Splunk": 1, | |
| "Zyxel": 1, | |
| "Kludex": 1, | |
| "Looking Glass": 1, | |
| "Grafana Labs": 1, | |
| "Metabase": 1, | |
| "Smartbedded": 1, | |
| "Gitea": 1, | |
| "Acronis": 1, | |
| "Vite": 1, | |
| "Atlassian": 1, | |
| "Meta": 1, | |
| "iCagenda": 1, | |
| "PTC": 1, | |
| "FreeType": 1, | |
| "Array Networks ": 1, | |
| "Mirasvit": 1, | |
| "Quest": 1, | |
| "Aquasecurity": 1, | |
| "Daemon": 1, | |
| "Mozilla": 1, | |
| "Kestra": 1, | |
| "Widget Factory": 1, | |
| "Rockwell": 1, | |
| "ASUS": 1, | |
| "Laravel": 1, | |
| "Drupal": 1, | |
| "Fortra": 1, | |
| "Sierra Wireless": 1, | |
| "Sophos": 1, | |
| "Digiever": 1, | |
| "TanStack": 1, | |
| "Gogs": 1, | |
| "MLflow": 1, | |
| "IGEL": 1, | |
| "Libraesva": 1, | |
| "Git": 1, | |
| "XWiki": 1, | |
| "ONLYOFFICE": 1, | |
| "Marimo": 1, | |
| "Ray-Project": 1, | |
| "Trend Micro": 1, | |
| "React Native Community": 1, | |
| "reviewdog": 1, | |
| "Erlang": 1, | |
| "n8n": 1, | |
| "NAKIVO": 1, | |
| "IBM": 1, | |
| "Mitel": 1, | |
| "JQuery": 1, | |
| "WebPros": 1, | |
| "ZKTeco": 1, | |
| "Ajax.NET Professional": 1, | |
| "EG Secure Solutions": 1 | |
| }, | |
| "cisa_distinct_vendors": 158, | |
| "cisa_distinct_products": 264, | |
| "mcq_original_answer_labels": { | |
| "A": 1167, | |
| "B": 502, | |
| "D": 25, | |
| "C": 123 | |
| }, | |
| "keyword_topics": { | |
| "iOS / Apple platform": 1178, | |
| "Kernel / operating systems": 948, | |
| "Memory safety / binary analysis": 664, | |
| "Web / API security": 681, | |
| "Network security": 502, | |
| "Identity / authentication": 463, | |
| "Cryptography": 203, | |
| "Cloud / containers": 575, | |
| "Malware / incident analysis": 276 | |
| } | |
| }, | |
| "eval": { | |
| "records": 264, | |
| "by_source": { | |
| "pentesting_explanation": 180, | |
| "apple_advisory": 42, | |
| "cisa_kev": 42 | |
| }, | |
| "unique_cves": 93, | |
| "cve_years": { | |
| "2025": 51, | |
| "2023": 2, | |
| "2021": 2, | |
| "2026": 19, | |
| "2024": 10, | |
| "2014": 2, | |
| "2010": 1, | |
| "2016": 1, | |
| "2017": 1, | |
| "2019": 2, | |
| "2020": 1, | |
| "2012": 1 | |
| }, | |
| "ios_versions": { | |
| "26.2": 41, | |
| "16.7.16": 1 | |
| }, | |
| "ios27_examples": 0, | |
| "apple_components": { | |
| "WebKit": 11, | |
| "Multi-Touch": 7, | |
| "Foundation": 2, | |
| "Screen Time": 2, | |
| "curl": 2, | |
| "Calling Framework": 1, | |
| "Telephony": 1, | |
| "BiometricKit": 1, | |
| "Books": 1, | |
| "Mail": 1, | |
| "AppleJPEG": 1, | |
| "Kernel": 1, | |
| "Notification Services": 1, | |
| "Security": 1, | |
| "MediaExperience": 1, | |
| "libarchive": 1, | |
| "WebKit Web Inspector": 1, | |
| "Photos": 1, | |
| "Messages": 1, | |
| "Icons": 1, | |
| "App Store": 1, | |
| "FaceTime": 1, | |
| "iTunes Store": 1 | |
| }, | |
| "cisa_vendors": { | |
| "Microsoft": 10, | |
| "N-able": 2, | |
| "SAP": 2, | |
| "Zyxel": 2, | |
| "ASUS": 2, | |
| "Oracle": 1, | |
| "Ivanti": 1, | |
| "TeleMessage": 1, | |
| "Omnissa": 1, | |
| "WordPress": 1, | |
| "Craft CMS": 1, | |
| "MongoDB": 1, | |
| "Linux": 1, | |
| "JFrog": 1, | |
| "Broadcom": 1, | |
| "Sophos": 1, | |
| "Aviatrix": 1, | |
| "PHP": 1, | |
| "Notepad++": 1, | |
| "Siemens": 1, | |
| "Rails": 1, | |
| "Joomlack": 1, | |
| "SonicWall": 1, | |
| "Google": 1, | |
| "TP-Link": 1, | |
| "TrueConf": 1, | |
| "Trend Micro": 1, | |
| "Zammad GmbH": 1, | |
| "JoomShaper": 1 | |
| }, | |
| "cisa_distinct_vendors": 29, | |
| "cisa_distinct_products": 36, | |
| "mcq_original_answer_labels": { | |
| "A": 113, | |
| "B": 47, | |
| "C": 17, | |
| "D": 3 | |
| }, | |
| "keyword_topics": { | |
| "iOS / Apple platform": 47, | |
| "Kernel / operating systems": 69, | |
| "Memory safety / binary analysis": 25, | |
| "Web / API security": 69, | |
| "Network security": 48, | |
| "Identity / authentication": 52, | |
| "Cryptography": 11, | |
| "Cloud / containers": 55, | |
| "Malware / incident analysis": 26 | |
| } | |
| }, | |
| "split_overlap": { | |
| "groups": 0, | |
| "cves": 0 | |
| }, | |
| "corpus_sha256": { | |
| "train": "5f8b9b7e59e39dff1b759f9606394db33ec820e45a50dc9ff0efd0eab8e9e9e4", | |
| "eval": "f2dc8e768048b0a38636839c9ce503dcd2045870a4998439f63c068a896ba39d" | |
| }, | |
| "gaps": [ | |
| "No iOS 27 advisory examples are in the current held-out split; iOS 27 generalization remains unmeasured.", | |
| "Apple examples primarily teach advisory interpretation, not kernel/WebKit source-code auditing.", | |
| "Original MCQ answer positions are heavily skewed toward A; the separate benchmark reorders eligible choices to balance answer letters.", | |
| "Exact group/CVE and lexical overlap checks cannot rule out semantic overlap or base-model pretraining contamination." | |
| ] | |
| } |