CVE-2014-4459

Description

Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote attackers to execute arbitrary code via crafted page objects in an HTML document.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.816

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Apple iTunes (X64) 12.1Windows
Multiple Vulnerabilities are affected in Apple iTunes 12.1Windows
Vulnerabilities CVE-2014-3192,CVE-2014-4459,CVE-2014-8146 are affected in Apple iTunes For Mac 12.1.3Mac
Vulnerabilities CVE-2014-4459 are affected in Apple Safari for MAC 6.1.5Mac
Vulnerabilities CVE-2014-4459 are affected in Apple Safari for MAC 7.1Mac
Vulnerabilities CVE-2014-4459 are affected in Apple Safari for MAC 8.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 6.1.5Mac
Vulnerabilities CVE-2014-4415,CVE-2014-4452,CVE-2014-4459 are affected in Apple Safari for MAC 7.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 8.0Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234