CVE-2014-4425

CVE-2014-4425 affects CFPreferences handling on Apple OS X pre-10.10. The setting “require password after sleep or screen saver begins” may not be enforced, enabling access by physically proximate attackers with unattended workstations. Apple’s public security content ties this issue to OS X Yose...