CVE-2014-8833

Publication date

2015-01-30 11:00:00

Family

apple

State

PUBLISHED

Description

SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during access to a permission cache, which allows local users to read search results associated with other users protected files via a Spotlight query.