CVE-2014-1595
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...
CVE-2014-1595 is a low vulnerability (CVSS 2.1) in Mozilla Firefox, published December 11, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.30%EPSS, 23rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
CVE-2014-1595- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-199
- Updated
- 2026-11-02
CVE ListNo score
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
CVE-2014-1595- Updated
- 2026-11-02
EUVDEUVD-2014-1671No score
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
EUVD-2014-1671- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p7c5-mjp4-8g9rNo score
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple...
Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.
- Record
GHSA-p7c5-mjp4-8g9r- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.mozilla.org/show_bug.cgi?id=1092855
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
mozilla.org/security/announce/2014/mfsa2014-90.html
support.apple.com/HT204244
reddit.com/r/netsec/comments/2ocxac/apple_coregraphics_framework_on_os_x_1010_is
lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
nvd.nist.gov/vuln/detail/CVE-2014-1595
github.com/advisories/GHSA-p7c5-mjp4-8g9r