Description
Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a URL.
Scores
EPSS
0.0126
EPSS Percentile
79.5%
Details
CWE
CWE-134
Status
published
Products (3)
apple/mac_os_x
10.9
apple/mac_os_x
10.9.1
apple/mac_os_x
10.9.2
Published
Apr 23, 2014
Tracked Since
Feb 18, 2026