CVE-2014-4363

Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via (1) an http web site, (2) an https web site with an unacceptable X.509 certificate, or (3) an IFRAME element.

• CWE-255

• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.htmlThird Party Advisory
• http://secunia.com/advisories/61306Third Party Advisory
• http://support.apple.com/kb/HT6440Vendor Advisory
• http://support.apple.com/kb/HT6441Vendor Advisory
• http://www.securityfocus.com/bid/69882Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/69909Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030866Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96075Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.htmlThird Party Advisory
• http://secunia.com/advisories/61306Third Party Advisory
• http://support.apple.com/kb/HT6440Vendor Advisory
• http://support.apple.com/kb/HT6441Vendor Advisory
• http://www.securityfocus.com/bid/69882Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/69909Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030866Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96075Third Party Advisory, VDB Entry

Published

Sep 18, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4357Accounts Framework in Apple iOS before 8 and Apple TV before…
• CVE-2014-4358Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-4359Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-4360Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-4361The Home & Lock Screen subsystem in Apple iOS before 8 does …
• CVE-2014-4362The Sandbox Profiles implementation in Apple iOS before 8 do…
• CVE-2014-4364The 802.1X subsystem in Apple iOS before 8 and Apple TV befo…
• CVE-2014-4365Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-4366Mail in Apple iOS before 8 does not prevent sending a LOGIN …
• CVE-2014-4367Apple iOS before 8 enables Voice Dial during all upgrade act…
• CVE-2014-4368The Accessibility subsystem in Apple iOS before 8 allows att…
• CVE-2014-4369The IOAcceleratorFamily API implementation in Apple iOS befo…