CVE-2014-4451
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier...
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
Exploit likelihood
What each source reports
NVD Score used
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
- Record
CVE-2014-4451- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
- Record
CVE-2014-4451- Updated
- 2026-11-02
EUVDEUVD-2014-4378 No score
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
- Record
EUVD-2014-4378- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-88fh-7grf-8jvm No score
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier...
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
- Record
GHSA-88fh-7grf-8jvm- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4451 is a high vulnerability (CVSS 7.2) in Apple Iphone Os, published November 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/98776
lists.apple.com/archives/security-announce/2014/Nov/msg00000.html
support.apple.com/en-us/HT6590
secunia.com/advisories/62504
securityfocus.com/bid/71138
securitytracker.com/id/1031232
nvd.nist.gov/vuln/detail/CVE-2014-4451
github.com/advisories/GHSA-88fh-7grf-8jvm