CVE-2014-5195
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the...
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
Exploit likelihood
What each source reports
NVD Score used
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
- Record
CVE-2014-5195- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
- Record
CVE-2014-5195- Updated
- 2026-11-02
EUVDEUVD-2014-5093 No score
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
- Record
EUVD-2014-5093- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6wqq-9ppm-4p57 No score
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the...
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
- Record
GHSA-6wqq-9ppm-4p57- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-5195 No score
Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.
- Record
UBUNTU-CVE-2014-5195- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
unityUbuntu:14.04:LTS |
before 7.2.2+14.04.20140714-0ubuntu1.1, plus listed versions 7.1.2+13.10.20131014.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu27.1.2+14.04.20131106.1-0ubuntu47.1.2+14.04.20131106.1-0ubuntu5 Show 27 moreShow less7.1.2+14.04.20140214.1-0ubuntu17.1.2+14.04.20140217-0ubuntu17.1.2+14.04.20140218.1-0ubuntu17.1.2+14.04.20140218.1-0ubuntu27.1.2+14.04.20140220-0ubuntu17.1.2+14.04.20140228-0ubuntu17.1.2+14.04.20140303-0ubuntu17.1.2+14.04.20140305-0ubuntu17.1.2+14.04.20140311-0ubuntu17.1.2+14.04.20140312-0ubuntu17.1.2+14.04.20140313-0ubuntu17.1.2+14.04.20140318-0ubuntu17.1.2+14.04.20140320.1-0ubuntu17.1.2+14.04.20140321-0ubuntu17.1.2+14.04.20140328.1-0ubuntu17.2.0+14.04.20140402-0ubuntu17.2.0+14.04.20140403-0ubuntu17.2.0+14.04.20140404-0ubuntu17.2.0+14.04.20140410-0ubuntu17.2.0+14.04.20140410.1-0ubuntu17.2.0+14.04.20140411-0ubuntu17.2.0+14.04.20140414.1-0ubuntu17.2.0+14.04.20140416-0ubuntu17.2.0+14.04.20140423-0ubuntu1.17.2.0+14.04.20140423-0ubuntu1.27.2.1+14.04.20140513-0ubuntu27.2.2+14.04.20140714-0ubuntu1 |
7.2.2+14.04.20140714-0ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-5195 is a high vulnerability (CVSS 7.2) in Ayatana Project Unity, published August 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in unity 7.2.2+14.04.20140714-0ubuntu1.1.