CVE-2014-4416

medium
Published 2014-09-19 · Modified 2026-05-06
CVSS v3
CVSS v2
6.9
VIR risk
6.9

Description

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CVE-2014-4395, CVE-2014-4396, CVE-2014-4397, CVE-2014-4398, CVE-2014-4399, CVE-2014-4400, and CVE-2014-4401.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — http://support.apple.com/kb/HT6443

OS impact

OSVersionStatusFixed in
macos macos10.8.5affected
macos macos10.9affected
macos macos10.9.1affected
macos macos10.9.2affected
macos macos10.9.3affected
macos macos10.9.4affected

References

CWEs

CWE-20

Verify integrity in audit chain (admin only). AS-IS.