CVE-2014-1949: Canonical Ubuntu

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu button.

Affected products

• Canonical Ubuntu: version 14.04 only
• Gnome Gtk: up to and including 3.10.9
• Linuxmint Linux Mint: version 17.0 only

Published 2015-01-16. Last modified 2026-06-17.