VIR Vulnerability Intelligence Relay

CVE-2014-4422

high
Published 2014-09-18 · Modified 2026-05-06
CVSS v3
8.1
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
6.8
VIR risk
8.1

Description

The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related to the random numbers.

Predictions

Exploit likelihood
88%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/kb/HT6535

OS impact
OSVersionStatusFixed in
macos macosaffected
macos macos6.0affected
macos macos6.0.1affected
macos macos6.0.2affected
macos macos6.1affected
macos macos6.1.1affected
macos macos6.1.2affected
macos macos7.0affected
macos macos7.0.1affected
macos macos7.0.2affected
macos macos7.0.3affected
macos macos7.0.4affected
macos macos7.0.5affected
macos macos7.0.6affected
macos macos7.1affected
macos macos7.1.1affected

References

CWEs

CWE-310

Verify integrity in audit chain (admin only). AS-IS.