CVE-2014-1314

macOS < 10.9.2 - Sandbox Protection Bypass via WindowServer Session Creation

Title source: llm
STIX 2.1

Description

WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application.

References (1)

Core 1
Core References
Third Party Advisory vendor-advisory x_refsource_apple
http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html

Scores

EPSS 0.0312
EPSS Percentile 86.4%

Details

CWE
CWE-264
Status published
Products (9)
apple/mac_os_x 10.9
apple/mac_os_x 10.9.1
apple/mac_os_x 10.8.0
apple/mac_os_x 10.8.1
apple/mac_os_x 10.8.2
apple/mac_os_x 10.8.3
apple/mac_os_x 10.8.4
apple/mac_os_x 10.8.5 (2 CPE variants)
apple/mac_os_x < 10.9.2
Published Apr 23, 2014
Tracked Since Feb 18, 2026