CVE-2014-1315: Apple Mac OS X

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a URL.

Affected products

• Apple Mac OS X: version 10.9 only; version 10.9.1 only; version 10.9.2 only

Published 2014-04-23. Last modified 2026-06-17.