CVE-2014-7224

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code.

• CWE-20

• http://www.openwall.com/lists/oss-security/2014/10/02/20Mailing List, Third Party Advisory
• https://daoyuan14.github.io/news/newattackvector.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96833Third Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/70222Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2014/10/02/20Mailing List, Third Party Advisory
• https://daoyuan14.github.io/news/newattackvector.htmlExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96833Third Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/70222Third Party Advisory, VDB Entry

Published

Feb 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7214Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7215Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7216Multiple stack-based buffer overflows in Yahoo! Messenger 11…
• CVE-2014-7217Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
• CVE-2014-7221TeamSpeak Client 3.0.14 and earlier allows remote authentica…
• CVE-2014-7222Buffer overflow in TeamSpeak Client 3.0.14 and earlier allow…
• CVE-2014-7226The file comment feature in Rejetto HTTP File Server (hfs) 2…
• CVE-2014-7227Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-7228Akeeba Restore (restore.php), as used in Joomla! 2.5.4 throu…
• CVE-2014-7229Unspecified vulnerability in Joomla! before 2.5.4 before 2.5…
• CVE-2014-7230The processutils.execute function in OpenStack oslo-incubato…
• CVE-2014-7231The strutils.mask_password function in the OpenStack Oslo ut…