Unscored CVE-2014-4361 EUVD-2014-4288GHSA-wxgh-x7rq-7w4p

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attacker…

Published Sep 18, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

The Home & Lock Screen subsystem in Apple iOS before 8 does not properly restrict the private API for app prominence, which allows attackers to determine the frontmost app by leveraging access to a crafted background app.

References

69949 vdb-entry
http://support.apple.com/kb/HT6441
1030866 vdb-entry
69882 vdb-entry
APPLE-SA-2014-09-17-1 vendor-advisory
appleios-cve20144361-sec-bypass(96094) vdb-entry