CVE-2014-1322 EXPLOIT
4.9
MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 64)
Patch early
A public exploit exists.
Description
The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object.
Scoring
| CVSS | 4.9 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:C/I:N/A:N |
| EPSS | 1.09% — more likely to be exploited than 64% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2014-04-23 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| apple | mac os x |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Apple Mac OSX - Local Security Bypass | 2014-04-22 |
References
→ the Explorer · watch your stack · NVD