Every CVE Search/ Get API key

USN-2303-1

unity vulnerability

No scoreFix available

It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A local attacker could possibly use this issue to run commands, and unlock the current session.

What each source reports

OSV No score

unity vulnerability

It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A local attacker could possibly use this issue to run commands, and unlock the current session.

Record
USN-2303-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
unity
Ubuntu:14.04:LTS
before 7.2.2+14.04.20140714-0ubuntu1.1, plus listed versions
7.1.2+13.10.20131014.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu17.1.2+14.04.20131106.1-0ubuntu27.1.2+14.04.20131106.1-0ubuntu47.1.2+14.04.20131106.1-0ubuntu5
Show 27 moreShow less
7.1.2+14.04.20140214.1-0ubuntu17.1.2+14.04.20140217-0ubuntu17.1.2+14.04.20140218.1-0ubuntu17.1.2+14.04.20140218.1-0ubuntu27.1.2+14.04.20140220-0ubuntu17.1.2+14.04.20140228-0ubuntu17.1.2+14.04.20140303-0ubuntu17.1.2+14.04.20140305-0ubuntu17.1.2+14.04.20140311-0ubuntu17.1.2+14.04.20140312-0ubuntu17.1.2+14.04.20140313-0ubuntu17.1.2+14.04.20140318-0ubuntu17.1.2+14.04.20140320.1-0ubuntu17.1.2+14.04.20140321-0ubuntu17.1.2+14.04.20140328.1-0ubuntu17.2.0+14.04.20140402-0ubuntu17.2.0+14.04.20140403-0ubuntu17.2.0+14.04.20140404-0ubuntu17.2.0+14.04.20140410-0ubuntu17.2.0+14.04.20140410.1-0ubuntu17.2.0+14.04.20140411-0ubuntu17.2.0+14.04.20140414.1-0ubuntu17.2.0+14.04.20140416-0ubuntu17.2.0+14.04.20140423-0ubuntu1.17.2.0+14.04.20140423-0ubuntu1.27.2.1+14.04.20140513-0ubuntu27.2.2+14.04.20140714-0ubuntu1
7.2.2+14.04.20140714-0ubuntu1.1

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

USN-2303-1 is a vulnerability with no CVSS score yet in unity, published July 31, 2014. No source lists public exploit code. Fixed in unity 7.2.2+14.04.20140714-0ubuntu1.1.

References

MoveEnter Open