CVE-2014-1361: Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not en...

Security readout for executives and security teams

This is an Apple Secure Transport information disclosure flaw in older iOS, OS X, and Apple TV releases. A remote attacker could cause the TLS stack to return data from uninitialized process memory. The main business risk is exposure of sensitive memory contents on legacy Apple systems that were not updated past the fixed releases. Exposure is most likely limited to legacy Apple devices or applications running iOS before 7.1.2, OS X before 10.9.4, or Apple TV before 6.1.2. The supplied affected-product metadata is incomplete, so validation should rely on Apple advisory versions and asset inventory rather than the normalized CPE data. Treat this as a legacy-platform cleanup issue unless vulnerable Apple systems remain in use. Prioritize remediation where old devices handle sensitive network traffic, authentication workflows, executive communications, or regulated data. There is no supplied evidence of active exploitation, but unsupported systems increase residual risk. Mitigation focus: Upgrade affected iOS devices to 7.1.2 or later where supported.; Upgrade affected OS X systems to 10.9.4 or later where supported.; Upgrade affected Apple TV devices to 6.1.2 or later where supported..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.