VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 7, 2014· Updated May 6, 2026

CVE-2014-5195

CVE-2014-5195

Description

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.

Affected products

4
  • Ayatana Project/Unity4 versions
    cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ayatana_project:unity:*:*:*:*:*:*:*:*range: <=7.2.2
    • cpe:2.3:a:ayatana_project:unity:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ayatana_project:unity:7.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ayatana_project:unity:7.3.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.