CVE-2014-1315

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-23 · updated 2026-06-17
Weakness: CWE-134

Description

Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a URL.

Affected products

macOS: 10.9, 10.9.1, 10.9.2

References

http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html
http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html

Get alerted when CVE-2014-1315 or the next vulnerability affects your stack