CVE-2014-8827: LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon bein...

Security readout for executives and security teams

This is a privacy failure in Apple OS X: before version 10.10.2, a Mac waking from sleep could briefly show the existing screen before entering the locked state. The attacker needs physical proximity, so the main risk is exposed sensitive information on unattended workstations. Exposure is limited to Macs running OS X versions earlier than 10.10.2, especially shared, public, or office devices left logged in with sensitive data visible before sleep. Treat this as a moderate-priority legacy endpoint exposure issue. It is not presented as remotely exploitable, but it can expose confidential information where attackers, visitors, or insiders can physically view unattended Macs. Mitigation focus: Update affected Macs to Apple OS X 10.10.2 or later.; Review Apple advisory HT204244 for vendor-specific update guidance.; Prioritize shared or physically accessible workstations for remediation..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.