Vulnerabilities > Apple > MAC OS X > 10.9
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-07-01 | CVE-2014-1317 | Information Exposure vulnerability in Apple mac OS X iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by reading this file. | 2.1 |
| 2014-05-19 | CVE-2013-7040 | Cryptographic Issues vulnerability in multiple products Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. | 4.3 |
| 2014-04-23 | CVE-2014-1322 | Information Exposure vulnerability in Apple mac OS X The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object. | 4.9 |
| 2014-04-23 | CVE-2014-1321 | Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X 10.9/10.9.1/10.9.2 Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching (1) a key or (2) the trackpad during a lid-close action. | 3.3 |
| 2014-04-23 | CVE-2014-1320 | Information Exposure vulnerability in Apple Iphone OS, mac OS X and Tvos IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object. | 4.9 |
| 2014-04-23 | CVE-2014-1319 | Buffer Errors vulnerability in Apple mac OS X 10.9/10.9.1/10.9.2 Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image. | 6.8 |
| 2014-04-23 | CVE-2014-1318 | Improper Input Validation vulnerability in Apple mac OS X The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via a crafted application. | 10.0 |
| 2014-04-23 | CVE-2014-1316 | Improper Input Validation vulnerability in Apple mac OS X Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon exit) via ASN.1 data encountered in the Kerberos 5 protocol. | 5.0 |
| 2014-04-23 | CVE-2014-1315 | USE of Externally-Controlled Format String vulnerability in Apple mac OS X 10.9/10.9.1/10.9.2 Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a URL. | 6.8 |
| 2014-04-23 | CVE-2014-1314 | Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application. | 10.0 |