Every CVE Search/ Get API key

CVE-2014-4423

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection...

4.3 Medium

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.

Exploit likelihood

1.56%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.

Record
CVE-2014-4423
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.

Record
CVE-2014-4423
Updated
2026-11-02
EUVDEUVD-2014-4350 No score

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.

Record
EUVD-2014-4350
Updated
2026-11-03
GitHub AdvisoriesGHSA-jcvc-63fp-7wj8 No score

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection...

The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.

Record
GHSA-jcvc-63fp-7wj8
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4423 is a medium vulnerability (CVSS 4.3) in Apple Iphone Os, published September 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. No source names a fixed version.

References

MoveEnter Open