CVE-2014-1595

CVE-2014-1595 describes a local information disclosure vulnerability affecting Mozilla Firefox, Firefox ESR, and Thunderbird on Apple OS X 10.10. The flaw stems from the omission of a CoreGraphics disable-logging action in jemalloc-based applications, allowing local users to read sensitive information, such as credentials, from /tmp files. With a CVSS score of 2.1 (low severity), exploitation requires local access and has a low impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it received some community discussion and media coverage at the time.