CVE-2015-3774

CVE-2015-3774 describes a vulnerability in the Dictionary app on Apple OS X versions prior to 10.10.5, where the application's failure to use HTTPS allows for man-in-the-middle attacks. This flaw enables attackers on the same network segment to intercept sensitive information or maliciously alter word definitions. With a CVSS score of 4.8, indicating medium severity, the vulnerability is exploitable with low complexity and no authentication, potentially leading to partial confidentiality and integrity compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.