About the security content of OS X Yosemite v10.10.2 and Security Update 2015-001 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2014-3566n/a: Generation of Predictable IV with CBC Mode
• CVE-2011-2391The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets
• CVE-2014-8839n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-8824n/a: Improper Input Validation
• CVE-2014-8821The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and CVE-2014-8820
• CVE-2014-8830n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-8838n/a: security vulnerability
• CVE-2014-8829SceneKit in Apple OS X before 10.10.2 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app
• CVE-2014-8820The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and CVE-2014-8821
• CVE-2014-8837Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app
• CVE-2014-8822n/a: security vulnerability
• CVE-2014-8817n/a: security vulnerability
• CVE-2014-8835n/a: security vulnerability
• CVE-2014-8825n/a: Improper Input Validation
• CVE-2014-8826LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR archive
• CVE-2014-8827n/a: Improper Access Control
• CVE-2014-8819The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8820 and CVE-2014-8821
• CVE-2014-8823n/a: security vulnerability
• CVE-2014-8833n/a: Improper Access Control
• CVE-2014-8836n/a: Improper Input Validation
• CVE-2014-8832n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-8828Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sandbox segment in a path
• CVE-2014-8831n/a: security vulnerability
• CVE-2014-8834n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-8816CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PDF document
• CVE-2014-8517n/a: Improper Neutralization of Special Elements used in a Command ('Command Injection')
• CVE-2014-7187n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-7186n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-6277n/a: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CVE-2014-5352n/a: security vulnerability
• CVE-2014-4486n/a: security vulnerability
• CVE-2014-4489n/a: security vulnerability
• CVE-2014-4498n/a: security vulnerability
• CVE-2014-4499n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-4495n/a: security vulnerability
• CVE-2014-4497n/a: security vulnerability
• CVE-2014-4488n/a: security vulnerability
• CVE-2014-4492n/a: security vulnerability
• CVE-2014-4487n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-4461n/a: Improper Input Validation
• CVE-2014-4485n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-4491n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-4483n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-4481n/a: security vulnerability
• CVE-2014-4484n/a: security vulnerability
• CVE-2014-4460n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-4420n/a: security vulnerability
• CVE-2014-4421n/a: security vulnerability
• CVE-2014-4426AFP File Server in Apple OS X before 10.10 allows remote attackers to discover the network addresses of all interfaces via an unspecified command to one interface
• CVE-2014-4419n/a: security vulnerability

Source and provenance

Original title: About the security content of OS X Yosemite v10.10.2 and Security Update 2015-001 - Apple Support. Captured 17 Oct 2026, 20:01 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.