CVE-2014-4439 — Sensitive Information Exposure in Apple MAC OS X

CWE-200 — Sensitive Information Exposure2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 37.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple MAC OS X
Timeline
PublishedOct 18
Latest updateMay 17

Description

Mail in Apple OS X before 10.10 does not properly recognize the removal of a recipient address from a message, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading a message intended exclusively for other recipients.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/mac_os_x10.9.5

🔴Vulnerability Details

1
GHSA
GHSA-g9mc-7hmq-f2p7: Mail in Apple OS X before 10↗2022-05-17
▶