Lucene search

K
cvelistAppleCVELIST:CVE-2014-1297
HistoryApr 02, 2014 - 3:00 p.m.

CVE-2014-1297

2014-04-0215:00:00
apple
www.cve.org
5

AI Score

6.2

Confidence

Low

EPSS

0.004

Percentile

73.5%

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

AI Score

6.2

Confidence

Low

EPSS

0.004

Percentile

73.5%