CVE-2014-7460: The Slots Heaven:FREE Slot Machine (aka com.twelvegigs.heaven.slots) application 1.123 for Android does not...

Security readout for executives and security teams

This CVE concerns an Android slot-machine app that failed to properly verify SSL/TLS certificates. A person controlling the network path could impersonate the app’s server and potentially capture sensitive information sent by the app. The issue appears app-specific, with no active exploitation evidence in the provided sources. Exposure is limited to Android devices that installed Slots Heaven: FREE Slot Machine version 1.123. Risk is higher on untrusted or controlled networks where an attacker can intercept traffic. Enterprise exposure depends on mobile device inventory and whether consumer apps are allowed on managed devices. Treat this as a targeted mobile-app hygiene issue, not a broad enterprise platform emergency. Prioritize confirming whether the app exists in your device fleet, then remove or block it if no supported fixed version is documented. Mitigation focus: Check vendor or app-store guidance for any fixed version or retirement notice.; Remove the affected app from managed devices if no supported fix exists.; Block installation through MDM or mobile application management controls..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.