CVE-2014-5195: Ayatana Project Unity

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by (1) leveraging a machine that had text selected when locking or (2) resuming from a suspension.

Affected products

• Ayatana Project Unity: up to and including 7.2.2; version 7.2.0 only; version 7.2.1 only; version 7.3.0 only

Published 2014-08-07. Last modified 2026-06-17.