About the security content of OS X Yosemite v10.10.3 and Security Update 2015-004 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2015-0204Affected product: security vulnerability
• CVE-2014-0207n/a: Improper Input Validation
• CVE-2014-3478n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-3480n/a: Improper Input Validation
• CVE-2014-4404Apple OS X Heap-Based Buffer Overflow Vulnerability
• CVE-2015-1130Apple OS X Authentication Bypass Vulnerability
• CVE-2013-6712n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2013-6438n/a: security vulnerability
• CVE-2013-5704n/a: security vulnerability
• CVE-2014-8830n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-8275n/a: security vulnerability
• CVE-2014-5120n/a: Improper Input Validation
• CVE-2014-4698n/a: security vulnerability
• CVE-2014-4670n/a: security vulnerability
• CVE-2014-4380n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-4405n/a: security vulnerability
• CVE-2014-4049n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-3981acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file
• CVE-2014-3668n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-3669n/a: security vulnerability
• CVE-2014-3710n/a: Improper Input Validation
• CVE-2014-3670n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-3587n/a: security vulnerability
• CVE-2014-3570n/a: security vulnerability
• CVE-2014-3572n/a: security vulnerability
• CVE-2014-3597n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-3569n/a: security vulnerability
• CVE-2014-3571n/a: security vulnerability
• CVE-2014-3538n/a: security vulnerability
• CVE-2014-3487n/a: Improper Input Validation
• CVE-2014-3479n/a: security vulnerability
• CVE-2014-2497n/a: NULL Pointer Dereference
• CVE-2014-0238n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-0231n/a: security vulnerability
• CVE-2014-0226n/a: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CVE-2014-0237n/a: security vulnerability
• CVE-2014-0118n/a: Uncontrolled Resource Consumption
• CVE-2014-0117n/a: Improper Input Validation
• CVE-2014-0098n/a: security vulnerability
• CVE-2015-1546n/a: security vulnerability
• CVE-2015-1545n/a: security vulnerability
• CVE-2015-1136Use-after-free vulnerability in CoreAnimation in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code by leveraging improper use of a mutex
• CVE-2015-1099n/a: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• CVE-2015-1143LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue
• CVE-2015-1132n/a: Improper Input Validation
• CVE-2015-1158n/a: security vulnerability
• CVE-2015-1133n/a: Improper Input Validation
• CVE-2015-1134n/a: Improper Input Validation
• CVE-2015-1140Buffer overflow in IOHIDFamily in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors
• CVE-2015-1142LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service (Finder crash) via crafted localization data

Source and provenance

Original title: About the security content of OS X Yosemite v10.10.3 and Security Update 2015-004 - Apple Support. Captured 17 Oct 2026, 20:01 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.