CVE-2014-4386
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain...
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.
Exploit likelihood
What each source reports
NVD Score used
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.
- Record
CVE-2014-4386- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.
- Record
CVE-2014-4386- Updated
- 2026-11-02
EUVDEUVD-2014-4313 No score
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.
- Record
EUVD-2014-4313- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jh4w-3cgw-324g No score
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain...
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.
- Record
GHSA-jh4w-3cgw-324g- Weakness
- CWE-362
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4386 is a low vulnerability (CVSS 1.9) in Apple Iphone Os, published September 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. No source names a fixed version.