{"id":"CVE-2014-1266","aliases":["EUVD-2014-1344","GHSA-4j69-27g2-fgcw"],"status":"published","title":"The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the...","description":"The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05741,"percentile":0.93112,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20","CWE-295"],"published":"2014-02-22T15:00:00Z","modified":"2026-06-17T00:04:36Z","exploits":[{"source":"pocgithub","id":"gabrielg/CVE-2014-1266-poc","title":"gabrielg/CVE-2014-1266-poc","date":"2014-02-24","url":"https://github.com/gabrielg/CVE-2014-1266-poc"},{"source":"pocgithub","id":"landonf/Testability-CVE-2014-1266","title":"landonf/Testability-CVE-2014-1266","date":"2014-02-22","url":"https://github.com/landonf/Testability-CVE-2014-1266"},{"source":"pocgithub","id":"macressler/SSLPatch","title":"macressler/SSLPatch","date":"2014-02-24","url":"https://github.com/macressler/SSLPatch"},{"source":"pocgithub","id":"meetlight942/PentesterLab-Intercept-CVE-2014-1266","title":"meetlight942/PentesterLab-Intercept-CVE-2014-1266","date":"2024-07-18","url":"https://github.com/meetlight942/PentesterLab-Intercept-CVE-2014-1266"}],"products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"tvos"}],"references":[{"url":"http://support.apple.com/kb/HT6147","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT6148","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-23.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://support.apple.com/kb/HT6150","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT6146","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://it.slashdot.org/comments.pl?sid=4821073\u0026cid=46310187","tags":["x_refsource_MISC","x_transferred","Issue Tracking"]},{"url":"https://www.cs.columbia.edu/~smb/blog/2014-02/2014-02-24.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://www.imperialviolet.org/2014/02/22/applebug.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://news.ycombinator.com/item?id=7281378","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1266"},{"url":"https://github.com/advisories/GHSA-4j69-27g2-fgcw"}],"sources":{"cve":[{"id":"CVE-2014-1266","description":"The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.","status":"published","published":"2014-02-22T15:00:00Z","modified":"2024-08-06T09:34:41.152Z","updated_at":"2026-11-02T14:33:45.938615Z"}],"euvd":[{"id":"EUVD-2014-1344","description":"The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.","status":"published","published":"2014-02-22T15:00:00Z","modified":"2024-08-06T09:34:41Z","updated_at":"2026-11-03T01:57:18.764724Z"}],"ghsa":[{"id":"GHSA-4j69-27g2-fgcw","title":"The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the...","description":"The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.","status":"published","published":"2022-05-14T01:27:04Z","modified":"2024-02-09T03:32:56Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-20","CWE-295"],"updated_at":"2026-11-02T14:55:34.624515Z"}],"nvd":[{"id":"CVE-2014-1266","description":"The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.","status":"published","published":"2014-02-22T17:05:21.767Z","modified":"2026-06-17T00:04:36.83Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:02:53.330367Z"}]}}