# CVEs published 2015-01-30

47 CVEs were published on January 30, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4467](https://cve.now/CVE-2014-4467.md): WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which al (no CVSS)
- [CVE-2014-4476](https://cve.now/CVE-2014-4476.md): WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, all (no CVSS)
- [CVE-2014-4477](https://cve.now/CVE-2014-4477.md): WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, all (no CVSS)
- [CVE-2014-4479](https://cve.now/CVE-2014-4479.md): WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, all (no CVSS)
- [CVE-2014-4480](https://cve.now/CVE-2014-4480.md): Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access (no CVSS)
- [CVE-2014-4481](https://cve.now/CVE-2014-4481.md): Integer overflow in CoreGraphics in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to (no CVSS)
- [CVE-2014-4483](https://cve.now/CVE-2014-4483.md): Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to exe (no CVSS)
- [CVE-2014-4484](https://cve.now/CVE-2014-4484.md): FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2014-4485](https://cve.now/CVE-2014-4485.md): Buffer overflow in the XML parser in Foundation in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remot (no CVSS)
- [CVE-2014-4486](https://cve.now/CVE-2014-4486.md): IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists (no CVSS)
- [CVE-2014-4487](https://cve.now/CVE-2014-4487.md): Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows attackers to execute a (no CVSS)
- [CVE-2014-4488](https://cve.now/CVE-2014-4488.md): IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly validate resource-queue metada (no CVSS)
- [CVE-2014-4489](https://cve.now/CVE-2014-4489.md): IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly initialize event queues, which (no CVSS)
- [CVE-2014-4491](https://cve.now/CVE-2014-4491.md): The extension APIs in the kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 do not prevent the presence (no CVSS)
- [CVE-2014-4492](https://cve.now/CVE-2014-4492.md): libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expe (no CVSS)
- [CVE-2014-4493](https://cve.now/CVE-2014-4493.md): The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app conta (no CVSS)
- [CVE-2014-4494](https://cve.now/CVE-2014-4494.md): Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from t (no CVSS)
- [CVE-2014-4495](https://cve.now/CVE-2014-4495.md): The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a sha (no CVSS)
- [CVE-2014-4496](https://cve.now/CVE-2014-4496.md): The mach\_port\_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address (no CVSS)
- [CVE-2014-4497](https://cve.now/CVE-2014-4497.md): Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitra (no CVSS)
- [CVE-2014-4498](https://cve.now/CVE-2014-4498.md): The CPU Software in Apple OS X before 10.10.2 allows physically proximate attackers to modify firmware during the EFI update process by inse (no CVSS)
- [CVE-2014-4499](https://cve.now/CVE-2014-4499.md): The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows loca (no CVSS)
- [CVE-2014-8816](https://cve.now/CVE-2014-8816.md): CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption an (no CVSS)
- [CVE-2014-8817](https://cve.now/CVE-2014-8817.md): coresymbolicationd in CoreSymbolication in Apple OS X before 10.10.2 does not verify that expected data types are present in XPC messages, w (no CVSS)
- [CVE-2014-8819](https://cve.now/CVE-2014-8819.md): The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerabil (no CVSS)
- [CVE-2014-8820](https://cve.now/CVE-2014-8820.md): The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerabil (no CVSS)
- [CVE-2014-8821](https://cve.now/CVE-2014-8821.md): The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerabil (no CVSS)
- [CVE-2014-8822](https://cve.now/CVE-2014-8822.md): IOHIDFamily in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a kernel context or cause a denial of service (write (no CVSS)
- [CVE-2014-8823](https://cve.now/CVE-2014-8823.md): The IOUSBControllerUserClient::ReadRegister function in the IOUSB controller in IOUSBFamily in Apple OS X before 10.10.2 allows local users (no CVSS)
- [CVE-2014-8824](https://cve.now/CVE-2014-8824.md): The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows attackers to execute arb (no CVSS)
- [CVE-2014-8825](https://cve.now/CVE-2014-8825.md): The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, which a (no CVSS)
- [CVE-2014-8826](https://cve.now/CVE-2014-8826.md): LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper pro (no CVSS)
- [CVE-2014-8827](https://cve.now/CVE-2014-8827.md): LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows (no CVSS)
- [CVE-2014-8828](https://cve.now/CVE-2014-8828.md): Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sand (no CVSS)
- [CVE-2014-8829](https://cve.now/CVE-2014-8829.md): SceneKit in Apple OS X before 10.10.2 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a cr (no CVSS)
- [CVE-2014-8830](https://cve.now/CVE-2014-8830.md): Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.2 allows remote attackers to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2014-8831](https://cve.now/CVE-2014-8831.md): security\_taskgate in Apple OS X before 10.10.2 allows attackers to read group-ACL-restricted keychain items of arbitrary apps via a crafted (no CVSS)
- [CVE-2014-8832](https://cve.now/CVE-2014-8832.md): The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local us (no CVSS)
- [CVE-2014-8833](https://cve.now/CVE-2014-8833.md): SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during access to a permission cache, which allows loca (no CVSS)
- [CVE-2014-8834](https://cve.now/CVE-2014-8834.md): UserAccountUpdater in Apple OS X 10.10 before 10.10.2 stores a PDF document's password in a printing preference file, which allows local use (no CVSS)
- [CVE-2014-8835](https://cve.now/CVE-2014-8835.md): The xpc\_data\_get\_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc\_data d (no CVSS)
- [CVE-2014-8836](https://cve.now/CVE-2014-8836.md): The Bluetooth driver in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of se (no CVSS)
- [CVE-2014-8837](https://cve.now/CVE-2014-8837.md): Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a pri (no CVSS)
- [CVE-2014-8838](https://cve.now/CVE-2014-8838.md): The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates, which allows attack (no CVSS)
- [CVE-2014-8839](https://cve.now/CVE-2014-8839.md): Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in messages" configuration, which allows remote attack (no CVSS)
- [CVE-2014-8840](https://cve.now/CVE-2014-8840.md): The iTunes Store component in Apple iOS before 8.1.3 allows remote attackers to bypass a Safari sandbox protection mechanism by leveraging r (no CVSS)
- [CVE-2014-9161](https://cve.now/CVE-2014-9161.md): CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 1 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-01-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.