Apple today seeded the first beta of OS X 10.10.4 to developers, just over a week after releasing OS X 10.10.3 with the Photos for OS X app to the public. The new beta, build 14E7f, can be. Mac os x 10.4 full. download free download - R for Mac OS X, Apple Mac OS X Mavericks, Apple Mac OS X Tiger 10.4.11 Combo Update, and many more programs. Apple mac os x free download - Apple Mac OS X Mavericks, Apple Mac OS X Yosemite, Apple Mac OS X Snow Leopard, and many more programs. This download includes the latest Lexmark printing and scanning software for OS X Mavericks, OS X Mountain Lion, OS X Lion and Mac OS X v10.6 Snow Leopard.
- Apple Mac Os X 10.10.4 Download Version
- Mac Os X 10.10 Download Free
- Mac Os X 10.10.4
- Mac Os X 10.9 Installer
- Apple Mac Os X 10.10.4 Download Windows 10
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website.
For information about the Apple Product Security PGP Key, see How to use the Apple Product Security PGP Key.
Where possible, CVE IDs are used to reference the vulnerabilities for further information.
To learn about other security updates, see Apple security updates.
OS X Yosemite v10.10.4 and Security Update 2015-005
- Admin FrameworkAvailable for: OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A process may gain admin privileges without proper authenticationDescription: An issue existed when checking XPC entitlements. This issue was addressed through improved entitlement checking.CVE-IDCVE-2015-3671 : Emil Kvarnhammar at TrueSec
- Admin FrameworkAvailable for: OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A non-admin user may obtain admin rightsDescription: An issue existed in the handling of user authentication. This issue was addressed through improved error checking.CVE-IDCVE-2015-3672 : Emil Kvarnhammar at TrueSec
- Admin FrameworkAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: An attacker may abuse Directory Utility to gain root privilegesDescription: Directory Utility was able to be moved and modified to achieve code execution within an entitled process. This issue was addressed by limiting the disk location that writeconfig clients may be executed from.CVE-IDCVE-2015-3673 : Patrick Wardle of Synack, Emil Kvarnhammar at TrueSec
- afpserverAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code executionDescription: A memory corruption issue existed in the AFP server. This issue was addressed through improved memory handling.CVE-IDCVE-2015-3674 : Dean Jerkovich of NCC Group
- apacheAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: An attacker may be able to access directories that are protected with HTTP authentication without knowing the correct credentialsDescription: The default Apache configuration did not include mod_hfs_apple. If Apache was manually enabled and the configuration was not changed, some files that should not be accessible might have been accessible using a specially crafted URL. This issue was addressed by enabling mod_hfs_apple.CVE-IDCVE-2015-3675 : Apple
- apacheAvailable for: OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Multiple vulnerabilities exist in PHP, the most serious of which may lead to arbitrary code executionDescription: Multiple vulnerabilities existed in PHP versions prior to 5.5.24 and 5.4.40. These were addressed by updating PHP to versions 5.5.24 and 5.4.40.CVE-IDCVE-2015-0235CVE-2015-0273
- AppleGraphicsControlAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to determine kernel memory layoutDescription: An issue existed in AppleGraphicsControl which could have led to the disclosure of kernel memory layout. This issue was addressed through improved bounds checking.CVE-IDCVE-2015-3676 : Chen Liang of KEEN Team
- AppleFSCompressionAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to determine kernel memory layoutDescription: An issue existed in LZVN compression that could have led to the disclosure of kernel memory content. This issue was addressed through improved memory handling.CVE-IDCVE-2015-3677 : an anonymous researcher working with HP's Zero Day Initiative
- AppleThunderboltEDMServiceAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to execute arbitrary code with system privilegesDescription: A memory corruption issue existed in the handling of certain Thunderbolt commands from local processes. This issue was addressed through improved memory handling.CVE-IDCVE-2015-3678 : Apple
- ATSAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: Processing a maliciously crafted font file may lead to an unexpected application termination or arbitrary code executionDescription: Multiple memory corruption issues existed in handling of certain fonts. These issues were addressed through improved memory handling.CVE-IDCVE-2015-3679 : Pawel Wylecial working with HP's Zero Day Initiative How to download wii games on usb mac.CVE-2015-3680 : Pawel Wylecial working with HP's Zero Day InitiativeCVE-2015-3681 : John Villamil (@day6reak), Yahoo Pentest TeamCVE-2015-3682 : 魏诺德
- BluetoothAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to execute arbitrary code with system privilegesDescription: A memory corruption issue existed in the Bluetooth HCI interface. This issue was addressed through improved memory handling.CVE-IDCVE-2015-3683 : Roberto Paleari and Aristide Fattori of Emaze Networks
- Certificate Trust PolicyAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: An attacker with a privileged network position may be able to intercept network trafficDescription: An intermediate certificate was incorrectly issued by the certificate authority CNNIC. This issue was addressed through the addition of a mechanism to trust only a subset of certificates issued prior to the mis-issuance of the intermediate. You can learn more about the security partial trust allow list.
- Certificate Trust PolicyAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Description: The certificate trust policy was updated. The complete list of certificates may be viewed at the OS X Trust Store.
- CFNetwork HTTPAuthenticationAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Following a maliciously crafted URL may lead to arbitrary code executionDescription: A memory corruption issue existed in handling of certain URL credentials. This issue was addressed through improved memory handling.CVE-IDCVE-2015-3684 : Apple
- CoreTextAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Processing a maliciously crafted text file may lead to an unexpected application termination or arbitrary code executionDescription: Multiple memory corruption issues existed in the processing of text files. These issues were addressed through improved bounds checking.CVE-IDCVE-2015-1157CVE-2015-3685 : AppleCVE-2015-3686 : John Villamil (@day6reak), Yahoo Pentest TeamCVE-2015-3687 : John Villamil (@day6reak), Yahoo Pentest TeamCVE-2015-3688 : John Villamil (@day6reak), Yahoo Pentest TeamCVE-2015-3689 : Apple
Apple Mac Os X 10.10.4 Download Version
- coreTLSAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: An attacker with a privileged network position may intercept SSL/TLS connectionsDescription: coreTLS accepted short ephemeral Diffie-Hellman (DH) keys, as used in export-strength ephemeral DH cipher suites. This issue, also known as Logjam, allowed an attacker with a privileged network position to downgrade security to 512-bit DH if the server supported an export-strength ephemeral DH cipher suite. The issue was addressed by increasing the default minimum size allowed for DH ephemeral keys to 768 bits.CVE-IDCVE-2015-4000 : The weakdh team at weakdh.org, Hanno Boeck
- DiskImagesAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to determine kernel memory layoutDescription: An information disclosure issue existed in the processing of disk images. This issue was addressed through improved memory management.CVE-IDCVE-2015-3690 : Peter Rutenbar working with HP's Zero Day Initiative
- Display DriversAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to execute arbitrary code with system privilegesDescription: An issue existed in the Monitor Control Command Set kernel extension by which a userland process could control the value of a function pointer within the kernel. The issue was addressed by removing the affected interface.CVE-IDCVE-2015-3691 : Roberto Paleari and Aristide Fattori of Emaze Networks
- EFIAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application with root privileges may be able to modify EFI flash memoryDescription: An insufficient locking issue existed with EFI flash when resuming from sleep states. This issue was addressed through improved locking.CVE-IDCVE-2015-3692 : Trammell Hudson of Two Sigma Investments, Xeno Kovah and Corey Kallenberg of LegbaCore LLC, Pedro Vilaça
- EFIAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may induce memory corruption to escalate privilegesDescription: A disturbance error, also known as Rowhammer, exists with some DDR3 RAM that could have led to memory corruption. This issue was mitigated by increasing memory refresh rates.CVE-IDCVE-2015-3693 : Mark Seaborn and Thomas Dullien of Google, working from original research by Yoongu Kim et al (2014)
- FontParserAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: Processing a maliciously crafted font file may lead to an unexpected application termination or arbitrary code executionDescription: A memory corruption issue existed in the processing of font files. This issue was addressed through improved input validation.CVE-IDCVE-2015-3694 : John Villamil (@day6reak), Yahoo Pentest Team
- Graphics DriverAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to execute arbitrary code with system privilegesDescription: An out of bounds write issue existed in NVIDIA graphics driver. This issue was addressed through improved bounds checking.CVE-IDCVE-2015-3712 : Ian Beer of Google Project Zero
- Intel Graphics DriverAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Multiple buffer overflow issues exist in the Intel graphics driver, the most serious of which may lead to arbitrary code execution with system privilegesDescription: Multiple buffer overflow issues existed in the Intel graphics driver. These were addressed through additional bounds checks.CVE-IDCVE-2015-3695 : Ian Beer of Google Project ZeroCVE-2015-3696 : Ian Beer of Google Project ZeroCVE-2015-3697 : Ian Beer of Google Project ZeroCVE-2015-3698 : Ian Beer of Google Project ZeroCVE-2015-3699 : Ian Beer of Google Project ZeroCVE-2015-3700 : Ian Beer of Google Project ZeroCVE-2015-3701 : Ian Beer of Google Project ZeroCVE-2015-3702 : KEEN Team
- ImageIOAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Multiple vulnerabilities existed in libtiff, the most serious of which may lead to arbitrary code executionDescription: Multiple vulnerabilities existed in libtiff versions prior to 4.0.4. They were addressed by updating libtiff to version 4.0.4.CVE-IDCVE-2014-8127CVE-2014-8128CVE-2014-8129CVE-2014-8130
- ImageIOAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Processing a maliciously crafted .tiff file may lead to an unexpected application termination or arbitrary code executionDescription: A memory corruption issue existed in the processing of .tiff files. This issue was addressed through improved bounds checking.CVE-IDCVE-2015-3703 : Apple
- Install Framework LegacyAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to execute arbitrary code with system privilegesDescription: Several issues existed in how Install.framework's 'runner' setuid binary dropped privileges. This was addressed by properly dropping privileges.CVE-IDCVE-2015-3704 : Ian Beer of Google Project Zero
- IOAcceleratorFamily
Available for: OS X Yosemite v10.10 to v10.10.3
Impact: A malicious application may be able to execute arbitrary code with system privileges
Description: Multiple memory corruption issues existed in IOAcceleratorFamily. These issues were addressed through improved memory handling.
CVE-ID
CVE-2015-3705 : KEEN Team
CVE-2015-3706 : KEEN Team - IOFireWireFamily
Available for: OS X Yosemite v10.10 to v10.10.3
Impact: A malicious application may be able to execute arbitrary code with system privileges
Description: Multiple null pointer dereference issues existed in the FireWire driver. These issues were addressed through improved error checking.
CVE-ID
CVE-2015-3707 : Roberto Paleari and Aristide Fattori of Emaze Networks
- Kernel
Available for: OS X Yosemite v10.10 to v10.10.3
Impact: A malicious application may be able to determine kernel memory layout
Description: A memory management issue existed in the handling of APIs related to kernel extensions which could have led to the disclosure of kernel memory layout. This issue was addressed through improved memory management.
CVE-ID
CVE-2015-3720 : Stefan Esser
- Kernel
Available for: OS X Yosemite v10.10 to v10.10.3
Impact: A malicious application may be able to determine kernel memory layout
Description: A memory management issue existed in the handling of HFS parameters which could have led to the disclosure of kernel memory layout. This issue was addressed through improved memory management.
CVE-ID
CVE-2015-3721 : Ian Beer of Google Project Zero
- kext toolsAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to overwrite arbitrary filesDescription: kextd followed symbolic links while creating a new file. This issue was addressed through improved handling of symbolic links.CVE-IDCVE-2015-3708 : Ian Beer of Google Project Zero
- kext toolsAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A local user may be able to load unsigned kernel extensionsDescription: A time-of-check time-of-use (TOCTOU) race condition condition existed while validating the paths of kernel extensions. This issue was addressed through improved checks to validate the path of the kernel extensions.CVE-IDCVE-2015-3709 : Ian Beer of Google Project Zero
- MailAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A maliciously crafted email can replace the message content with an arbitrary webpage when the message is viewedDescription: An issue existed in the support for HTML email which allowed message content to be refreshed with an arbitrary webpage. The issue was addressed through restricted support for HTML content.CVE-IDCVE-2015-3710 : Aaron Sigel of vtty.com, Jan Souček
- ntfsAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to determine kernel memory layoutDescription: An issue existed in NTFS that could have led to the disclosure of kernel memory content. This issue was addressed through improved memory handling.CVE-IDCVE-2015-3711 : Peter Rutenbar working with HP's Zero Day Initiative
- ntpAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: An attacker in a privileged position may be able to perform a denial of service attack against two ntp clientsDescription: Multiple issues existed in the authentication of ntp packets being received by configured end-points. These issues were addressed through improved connection state management.CVE-IDCVE-2015-1798
- OpenSSLAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: Multiple issues exist in OpenSSL, including one that may allow an attacker to intercept connections to a server that supports export-grade ciphersDescription: Multiple issues existed in OpenSSL 0.9.8zd which were addressed by updating OpenSSL to version 0.9.8zf.CVE-IDCVE-2015-0209CVE-2015-0286CVE-2015-0287CVE-2015-0288CVE-2015-0289CVE-2015-0293
- QuickTimeAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Processing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code executionDescription: Multiple memory corruption issues existed in QuickTime. These issues were addressed through improved memory handling.CVE-IDCVE-2015-3661 : G. Geshev working with HP's Zero Day InitiativeCVE-2015-3662 : kdot working with HP's Zero Day InitiativeCVE-2015-3663 : kdot working with HP's Zero Day InitiativeCVE-2015-3666 : Steven Seeley of Source Incite working with HP's Zero Day InitiativeCVE-2015-3667 : Ryan Pentney, Richard Johnson of Cisco Talos and Kai Lu of Fortinet's FortiGuard LabsCVE-2015-3668 : Kai Lu of Fortinet's FortiGuard LabsCVE-2015-3713 : Apple
- SecurityAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A remote attacker may cause an unexpected application termination or arbitrary code executionDescription: An integer overflow existed in the Security framework code for parsing S/MIME e-mail and some other signed or encrypted objects. This issue was addressed through improved validity checking.CVE-IDCVE-2013-1741
- SecurityAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Tampered applications may not be prevented from launchingDescription: Apps using custom resource rules may have been susceptible to tampering that would not have invalidated the signature. This issue was addressed with improved resource validation.CVE-IDCVE-2015-3714 : Joshua Pitts of Leviathan Security Group
- SecurityHow to download from icloud to mac photos. Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: A malicious application may be able to bypass code signing checksDescription: An issue existed where code signing did not verify libraries loaded outside the application bundle. This issue was addressed with improved bundle verification.CVE-IDCVE-2015-3715 : Patrick Wardle of Synack
- SpotlightAvailable for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, OS X Yosemite v10.10 to v10.10.3Impact: Searching for a malicious file with Spotlight may lead to command injectionDescription: A command injection vulnerability existed in the handling of filenames of photos added to the local photo library. This issue was addressed through improved input validation.CVE-IDCVE-2015-3716 : Apple
- SQLiteAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A remote attacker may cause an unexpected application termination or arbitrary code executionDescription: Multiple buffer overflows existed in SQLite's printf implementation. These issues were addressed through improved bounds checking.CVE-IDCVE-2015-3717 : Peter Rutenbar working with HP's Zero Day Initiative
- SQLiteAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A maliciously crafted SQL command may allow unexpected application termination or arbitrary code executionDescription: An API issue existed in SQLite functionality. This was addressed through improved restrictions.CVE-IDCVE-2015-7036 : Peter Rutenbar working with HP's Zero Day Initiative
- System StatsAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: A malicious app may be able to compromise systemstatsdDescription: A type confusion issue existed in systemstatsd's handling of interprocess communication. By sending a maliciously formatted message to systemstatsd, it may have been possible to execute arbitrary code as the systemstatsd process. The issue was addressed through additional type checking.CVE-IDCVE-2015-3718 : Roberto Paleari and Aristide Fattori of Emaze Networks
- TrueTypeScalerAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: Processing a maliciously crafted font file may lead to an unexpected application termination or arbitrary code executionDescription: A memory corruption issue existed in the processing of font files. This issue was addressed through improved input validation.CVE-IDCVE-2015-3719 : John Villamil (@day6reak), Yahoo Pentest Team
- zipAvailable for: OS X Yosemite v10.10 to v10.10.3Impact: Extracting a maliciously crafted zip file using the unzip tool may lead to an unexpected application termination or arbitrary code executionDescription: Multiple memory corruption issues existed in the handling of zip files. These issues were addressed through improved memory handling.CVE-IDCVE-2014-8139CVE-2014-8140CVE-2014-8141
OS X Yosemite v10.10.4 includes the security content of Safari 8.0.7.
Check compatibility
You can upgrade to OS Yosemite on any of the following Mac models. Your Mac also needs at least 2GB of memory and 8GB of available storage space.
MacBook introduced in 2009 or later, plus MacBook (13-inch, Aluminum, Late 2008)
MacBook Air introduced in late 2008 or later
MacBook Pro introduced in mid 2007 or later
Mac mini introduced in early 2009 or later
iMac introduced in mid 2007 or later
Mac Pro introduced in early 2008 or later
Xserve models introduced in early 2009
MacBook Air introduced in late 2008 or later
MacBook Pro introduced in mid 2007 or later
Mac mini introduced in early 2009 or later
iMac introduced in mid 2007 or later
Mac Pro introduced in early 2008 or later
Xserve models introduced in early 2009
To find your Mac model, memory, storage space, and macOS version, choose About This Mac from the Apple menu . If your Mac isn't compatible with OS X Yosemite, the installer will let you know.
Make a backup
Before installing any upgrade, it’s a good idea to back up your Mac. Time Machine makes it simple, and other backup methods are also available. Learn how to back up your Mac.
Get connected
It takes time to download and install OS X, so make sure that you have a reliable Internet connection. If you're using a Mac notebook computer, plug it into AC power.
Download OS X Yosemite
For the strongest security and latest features, find out whether you can upgrade to macOS Catalina, the latest version of macOS.
If you still need OS X Yosemite, use this link: Download OS X Yosemite. A file named InstallMacOSX.dmg will download to your Mac.
Install the macOS installer
Double-click the downloaded file to open a window showing its contents. Then double-click the file within, named InstallMacOSX.pkg.
Follow the onscreen instructions, which will guide you through the steps necessary to install.
Begin installation
After installation of the installer is complete, open the Applications folder on your Mac, then double-click the file named Install OS X Yosemite.
Mac Os X 10.10 Download Free
Click Continue and follow the onscreen instructions. You might find it easiest to begin installation in the evening so that it can complete overnight, if needed.
Allow installation to complete
Please allow installation to complete without putting your Mac to sleep or closing its lid. Your Mac might restart, show a progress bar, or show a blank screen several times as it installs both OS X and related updates to your Mac firmware.
Mac Os X 10.10.4
Mac Os X 10.9 Installer
Learn more
Apple Mac Os X 10.10.4 Download Windows 10
- OS X Yosemite won't install on top of a later version of macOS, but you can erase your disk first or install on another disk.
- You can use macOS Recovery to reinstall macOS.