CVE-2014-4425

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-18 · updated 2026-06-17
Weakness: CWE-287

Description

CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.

Affected products

macOS: through 10.9.5

References

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
http://www.securityfocus.com/bid/70630
http://www.securitytracker.com/id/1031063
https://exchange.xforce.ibmcloud.com/vulnerabilities/97640
https://support.apple.com/kb/HT6535
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
http://www.securityfocus.com/bid/70630
http://www.securitytracker.com/id/1031063
https://exchange.xforce.ibmcloud.com/vulnerabilities/97640
https://support.apple.com/kb/HT6535

Get alerted when CVE-2014-4425 or the next vulnerability affects your stack