CVEs published in January 2015

682 vulnerabilities, 42 critical, 2 exploited.

• mozilla bugzilla, fedoraproject fedora +1 more Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x... CVE-2014-8630 Fix available 6.5 MediumJanuary 31, 2015
• chromium-browser Debian chromium-browser - end of life DSA-3148-1 No scoreJanuary 31, 2015
• libmspack project libmspack Integer overflow in the qtmd_decompress function in libmspack 0.4 allows remote attackers to... CVE-2014-9556 Fix available 5.0 MediumJanuary 30, 2015
• adobe acrobat, acrobat reader +1 more CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows,... CVE-2014-9161 9.3 HighJanuary 30, 2015
• apple iphone os The iTunes Store component in Apple iOS before 8.1.3 allows remote attackers to bypass a Safari... CVE-2014-8840 6.8 MediumJanuary 30, 2015
• apple mac os x Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages... CVE-2014-8839 5.0 MediumJanuary 30, 2015
• apple mac os x The Security component in Apple OS X before 10.10.2 does not properly process cached information... CVE-2014-8838 4.3 MediumJanuary 30, 2015
• apple mac os x Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow... CVE-2014-8837 9.3 HighJanuary 30, 2015
• apple mac os x The Bluetooth driver in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a... CVE-2014-8836 10.0 HighJanuary 30, 2015
• apple mac os x The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a... CVE-2014-8835 Public exploit 9.3 HighJanuary 30, 2015
• apple mac os x UserAccountUpdater in Apple OS X 10.10 before 10.10.2 stores a PDF document's password in a... CVE-2014-8834 2.1 LowJanuary 30, 2015
• apple mac os x SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during... CVE-2014-8833 2.1 LowJanuary 30, 2015
• apple mac os x The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an... CVE-2014-8832 4.9 MediumJanuary 30, 2015
• apple mac os x security_taskgate in Apple OS X before 10.10.2 allows attackers to read group-ACL-restricted... CVE-2014-8831 5.0 MediumJanuary 30, 2015
• apple mac os x Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.2 allows remote attackers to... CVE-2014-8830 6.8 MediumJanuary 30, 2015
• apple mac os x SceneKit in Apple OS X before 10.10.2 allows attackers to execute arbitrary code or cause a... CVE-2014-8829 7.5 HighJanuary 30, 2015
• apple mac os x Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a... CVE-2014-8828 7.5 HighJanuary 30, 2015
• apple mac os x LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately... CVE-2014-8827 2.1 LowJanuary 30, 2015
• apple mac os x LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which... CVE-2014-8826 Public exploit 5.0 MediumJanuary 30, 2015
• apple mac os x The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of... CVE-2014-8825 7.2 HighJanuary 30, 2015
• apple mac os x The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata... CVE-2014-8824 10.0 HighJanuary 30, 2015
• apple mac os x The IOUSBControllerUserClient::ReadRegister function in the IOUSB controller in IOUSBFamily in... CVE-2014-8823 4.7 MediumJanuary 30, 2015
• apple mac os x IOHIDFamily in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a kernel... CVE-2014-8822 10.0 HighJanuary 30, 2015
• apple mac os x The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via... CVE-2014-8821 7.2 HighJanuary 30, 2015
• apple mac os x The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via... CVE-2014-8820 7.2 HighJanuary 30, 2015
• apple mac os x The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via... CVE-2014-8819 7.2 HighJanuary 30, 2015
• apple mac os x coresymbolicationd in CoreSymbolication in Apple OS X before 10.10.2 does not verify that... CVE-2014-8817 10.0 HighJanuary 30, 2015
• apple mac os x CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or... CVE-2014-8816 6.8 MediumJanuary 30, 2015
• apple mac os x The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID... CVE-2014-4499 2.1 LowJanuary 30, 2015
• apple mac os x The CPU Software in Apple OS X before 10.10.2 allows physically proximate attackers to modify... CVE-2014-4498 4.7 MediumJanuary 30, 2015
• apple mac os x Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X... CVE-2014-4497 10.0 HighJanuary 30, 2015
• apple iphone os, tvos +1 more The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3... CVE-2014-4496 5.0 MediumJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does... CVE-2014-4495 10.0 HighJanuary 30, 2015
• apple iphone os Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining... CVE-2014-4494 6.8 MediumJanuary 30, 2015
• apple iphone os The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows... CVE-2014-4493 7.5 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does... CVE-2014-4492 Public exploit EPSS 19.7% 7.5 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more The extension APIs in the kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple... CVE-2014-4491 5.0 MediumJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does... CVE-2014-4489 10.0 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does... CVE-2014-4488 10.0 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV... CVE-2014-4487 10.0 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0... CVE-2014-4486 10.0 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more Buffer overflow in the XML parser in Foundation in Apple iOS before 8.1.3, Apple OS X before 10... CVE-2014-4485 7.5 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows... CVE-2014-4484 7.5 HighJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV... CVE-2014-4483 6.8 MediumJanuary 30, 2015
• apple iphone os, mac os x, tvos +2 more Integer overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple... CVE-2014-4481 Public exploit 6.8 MediumJanuary 30, 2015
• apple iphone os, tvos +1 more Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple... CVE-2014-4480 10.0 HighJanuary 30, 2015
• apple safari, iphone os, itunes +1 more +3 more WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x... CVE-2014-4479 6.8 MediumJanuary 30, 2015
• apple safari, iphone os, itunes +1 more +3 more WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x... CVE-2014-4477 6.8 MediumJanuary 30, 2015
• apple safari, iphone os, itunes +1 more +3 more WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x... CVE-2014-4476 6.8 MediumJanuary 30, 2015
• apple iphone os WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries... CVE-2014-4467 4.3 MediumJanuary 30, 2015
• Show olderLoading…