Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9umk-zzdr-1bbb
Vulnerability ID VCID-9umk-zzdr-1bbb
Aliases CVE-2014-2234
Summary A certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent (TEA) feature without terminating certain TLS/SSL handshakes as specified in the SSL_CTX_set_verify callback function's documentation, which allows remote attackers to bypass extra verification within a custom application via a crafted certificate chain that is acceptable to TEA but not acceptable to that application.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
epss 0.00111 https://api.first.org/data/v1/epss?cve=CVE-2014-2234
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2014-2234
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.29566
EPSS Score 0.00111
Published At April 8, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T17:43:26.288177+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.0.0