CVE-2014-4435: The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for…

PriorityP416medium4.4CVSS 2.0

AVLACMAuNCPIPAP

EPSS

0.33%

25.3th percentile

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	<= 10.9.5	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.