CVE-2014-4404

CVE Database · CVE-2014-4404

CVE-2014-4404

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

49.05%

Published

Sep 18, 2014

Modified

Apr 21, 2026

CISA Known Exploited Vulnerability

Added: 2022-02-10 · Due: 2022-08-10

Apply updates per vendor instructions.

Public PoC / Exploit (2)

All weaponized →

Exploit-DBApple Mac OSX - IOKit Keyboard Driver Privilege Escalation (Metasploit)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787CWE-787

Affected Products (4)

apple · iphone_os (up to 8.0)vulnerable

apple · mac_os_x (up to 10.10.0)vulnerable

apple · mac_os_x (up to 10.10.3)vulnerable

apple · tvos (up to 7.0)vulnerable

References (20)

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

Broken Link

http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html

Broken Link

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Broken Link

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

Mailing ListVendor Advisory

http://support.apple.com/kb/HT6441

Vendor Advisory

http://support.apple.com/kb/HT6442

Vendor Advisory

http://www.securityfocus.com/bid/69882

KEV Catalog EPSS Scores Vendors All CVEs