CVE-2014-5195: Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard...

Security readout for executives and security teams

CVE-2014-5195 is a lock-screen bypass in Ubuntu’s Unity desktop. On affected Unity versions, the lock screen may fail to capture keyboard focus during lock or resume. A person with physical access could potentially get past the lock screen under specific conditions. Exposure is limited to Ubuntu desktop systems using affected Unity versions. Servers without the Unity desktop are unlikely to be exposed based on the provided sources. Treat this as a workstation physical-security issue, not an internet-facing emergency. Patch affected Ubuntu Unity desktops, especially laptops and shared machines where lock-screen trust matters. Mitigation focus: Upgrade Unity to 7.2.3, 7.3.1, or later supported Ubuntu packages.; Review Ubuntu USN-2303-1 for vendor-specific package guidance.; Prioritize shared workstations, kiosks, labs, and laptops exposed to physical access..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.