About the security content of OS X Mavericks v10.9 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2011-3389Affected product: Inadequate Encryption Strength
• CVE-2013-5180n/a: security vulnerability
• CVE-2013-5173n/a: security vulnerability
• CVE-2013-5192The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a request with a crafted (1) port or (2) port number
• CVE-2013-5184n/a: security vulnerability
• CVE-2013-5189n/a: security vulnerability
• CVE-2013-5182n/a: security vulnerability
• CVE-2013-5135n/a: Use of Externally-Controlled Format String
• CVE-2013-5174Integer signedness error in the kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a crafted tty read operation
• CVE-2013-5167n/a: security vulnerability
• CVE-2013-5191n/a: security vulnerability
• CVE-2013-5186n/a: security vulnerability
• CVE-2013-5177The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service (panic) via an invalid iovec structure
• CVE-2013-5172n/a: security vulnerability
• CVE-2013-5188n/a: security vulnerability
• CVE-2013-5190n/a: security vulnerability
• CVE-2013-5176n/a: security vulnerability
• CVE-2013-5168Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL
• CVE-2013-5187n/a: security vulnerability
• CVE-2013-5181n/a: security vulnerability
• CVE-2013-5165n/a: security vulnerability
• CVE-2013-5185n/a: security vulnerability
• CVE-2013-5175The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service (out-of-bounds read and system crash) via a crafted Mach-O file
• CVE-2013-5166n/a: security vulnerability
• CVE-2013-5169n/a: security vulnerability
• CVE-2013-5183n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2013-5171CoreGraphics in Apple Mac OS X before 10.9 allows local users to bypass secure input mode and log an arbitrary application's keystrokes via a hotkey event registration
• CVE-2011-4944n/a: security vulnerability
• CVE-2011-3427n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2011-2391The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets
• CVE-2012-1150n/a: security vulnerability
• CVE-2012-0876n/a: Uncontrolled Resource Consumption
• CVE-2012-0845n/a: security vulnerability
• CVE-2013-5170Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document
• CVE-2013-5178n/a: security vulnerability
• CVE-2013-5179App Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox restrictions via a crafted app that uses the LaunchServices interface to specify process arguments
• CVE-2013-5139The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds array access) via a crafted application
• CVE-2013-5142n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2013-5141n/a: security vulnerability
• CVE-2013-5138IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted application
• CVE-2013-5145n/a: security vulnerability
• CVE-2013-4073n/a: security vulnerability
• CVE-2013-3950n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2013-3954n/a: Improper Input Validation
• CVE-2013-1944n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2013-1667The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key
• CVE-2013-0249n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer

Source and provenance

Original title: About the security content of OS X Mavericks v10.9 - Apple Support. Captured 17 Oct 2026, 20:01 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.