CVE-2014-3202: Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers t...

Security readout for executives and security teams

This is a physical-access lock-screen bypass in Unity before 7.2.1. A person at a locked Ubuntu desktop could trigger a Unity crash and bypass the lock screen. The business risk is exposure of an already logged-in workstation, not remote server compromise. Exposure is most likely on Ubuntu desktop systems running affected Unity versions before 7.2.1, especially shared, public, kiosk, lab, or unattended workstations where someone can reach the keyboard. Treat this as a targeted desktop risk. It is not remote wormable exposure, but it can defeat locked-session protection on accessible workstations and may expose sensitive applications or data left open by users. Mitigation focus: Upgrade Unity to 7.2.1 or later where vendor packages are available.; Apply relevant Ubuntu security and package updates for affected desktop systems.; Prioritize shared, public, kiosk, and unattended workstations..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.