CVE-2014-1595
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
Exploit likelihood
What each source reports
NVD Score used
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
CVE-2014-1595- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-199
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
CVE-2014-1595- Updated
- 2026-11-02
EUVDEUVD-2014-1671 No score
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
EUVD-2014-1671- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p7c5-mjp4-8g9r No score
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
GHSA-p7c5-mjp4-8g9r- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1595 is a low vulnerability (CVSS 2.1) in Mozilla Firefox, published December 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=1092855
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
mozilla.org/security/announce/2014/mfsa2014-90.html
support.apple.com/HT204244
reddit.com/r/netsec/comments/2ocxac/apple_coregraphics_framework_on_os_x_1010_is
lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
nvd.nist.gov/vuln/detail/CVE-2014-1595
github.com/advisories/GHSA-p7c5-mjp4-8g9r